Quick Reference Guide

Chapter 5. Managing Users, Groups, and Authentication | 147
5
5. Managing Users, Groups, and
Authentication
This chapter describes how to manage users, groups, and authentication on the STM. This
chapter contains the following sections:
• About Users, Groups, and Domains on this page
• Configuring Groups on page 148
• Configuring User Accounts on page 152
• Configuring Authentication on page 154
• Global User Settings on page 170
• Viewing and Logging Out Active Users on page 172
About Users, Groups, and Domains
Users can be individual users or can be part of a group, and a group is generally part of a
domain. Normally, you first create a domain, then you create a group that you assign to a
domain, and then you create users that you assign to a group. The STM does not let you
create domains; the local groups that you define are automatically assigned to the STM’s
prosecuredomain default domain. However, you can use existing LDAP and RADIUS
domains on the STM.
The main purpose for using groups and domains is to apply exceptions (that is, adding or
removing restrictions) for Web browsing, URL access, and application access (see Setting
Access Exception Rules for Web Access on page 132).
Note: For information about a different type of users—those with
administrative and guest privileges—see About Users with
Administrative and Guest Privileges on page 61.