User manual

System
260
You may specify the following access controls for each administrative user.
• The Login control provides the user with telnet and ssh access to the command-line
administration interface of the SG unit
• The Administration control provides the user with the ability to make changes to the
SG unit's configuration via the web-based administration interface. This should only
be provided to trusted users who are permitted to configure and reconfigure the unit.
• The Diagnostic control provides the user with the ability to view restricted diagnostic
information via the web-based administration interface. This access control may be
given to technical support users so they can attempt to diagnose but not fix any
problems which occur.
• The Encrypted save / restore all control provides the user to with the ability to save
and restore the configuration of the SG unit via the Save/Restore page (see the
Save/Restore section earlier in this chapter). This access control may be given to a
technician whom you want to be able to restore the unit to a known good
configuration but to whom you do not wish to grant full administration rights.
Warning
A user with Encrypted save / restore all access can conceivably create an
encrypted config file with an arbitrary root password that they can restore, thus
granting them Administration privileges. Therefore, grant Encrypted save / restore
all only to users that you trust with Administration access.