[Contents] [Prev] [Next] [Index] [Report an Error]

Users—Local Authentication—Add User Dialog Box

Description

Use the Users—Local Authentication—Add User dialog box to add a new user for JUNOScope software operations. Adding a new user requires a username, password, and permission level.

Click Settings > Users. Click Add in the Users—Local Authentication dialog box.

Permissions

Superuser

Dialog Elements

Username text box—Type the name of the user you want to add. The username must be 20 characters or less.

Password text box—Type a unique password for the user. The password must be between 6 and 128 characters.

A JUNOScope software password should meet the following restrictions:

Allow the full range of ASCII characters (except control characters).

Enforce a minimum of 6 characters.

Require a change in the character set, including uppercase, lowercase, numeric, and punctuation.

Confirm Password text box—Retype the user password to confirm it.

User Group list box—Select the permissions or access privileges for the user, for JUNOScope software operations. Click the down-arrow to display the available options: adminstrator, read-write user, and read-only user.

No user privilege level is required to perform network planning tasks for the JUNOScope software. Planning tasks can be performed in the network operations center (NOC) by a network designer or engineer. These network planning tasks include the following:

Determine which routers to connect to and manage
Determine which users can access and use the software, and their permission levels
Configure the JUNOS software on each router for the supported JUNOScript access protocols
Configure the JUNOS software on each router for a digital certificate for the JUNOScript server
Configure the JUNOS software on each router for each user you want to use the JUNOScope software
Determine how often you want archive operations to occur on routers
Table 51 describes the authorization a user group has to perform JUNOScope software tasks and to access devices on the network that have been configured for element management.

Table 51: JUNOScope User Group Permissions and Access Privileges

JUNOScope Operation	Superuser	Read-Write	Read-Only	None	Comments
Installation
Install, reinstall, upgrade, or downgrade JUNOScope software	X	—	—	—	The JUNOScope software installation is performed by the application installer.
Upgrade JUNOScope from a previous release	—	—	—	—	If the installer upgrades the JUNOScope software from an earlier version, existing users are assign to one of the three pre-defined user groups (administrator, read-write user, read-only user), based on their existing permission level. In other words, users with superuser permission are put into the administrator user group; users with read-write permission are put to the read-write user user group; users with read-only permission are put into the read-only user user group.
Looking Glass
Query	X	X	X	X	Looking Glass reports require read-write or read-only permissions to a selected device. When a user, under a given user group, runs a query, the Device list is populated only with devices with read or read-write access.
Configuration Manager
Configuration Browser	X	X	X	X	Read-write or read-only permission is required for a user to browse a device configuration. The Device drop-down list box is populated only with devices with read-write or read-only access.
Configuration Editor	X	X	—	—	Read-write permission is required for a user to edit a device configuration. The Device drop-down list box is populated only with devices with read-write access.
Archive	X	X	—	—	Read-write permission is required for a user in a user group to archive a configuration in the JUNOScope repository. The Group and Select Device(s) drop-down list boxes are populated only with groups or devices with read-write access.
Archive Tag	X	X	—	—	Superuser or read-write permission is required to use Archive Tags. The Selected Device(s) drop-down list box is populated only with devices with read-write access. The group drop-down list box is populated with device groups with read-write access.
Audit Configurations	X	X	—	—	Superuser or read-write permission is required to use Audit Configurations. The Selected Device(s) drop-down list box is populated only with devices with read-write access. The group drop-down list box is populated with device groups with read-write access.
Audit Partial Configuration	X	X	—	—	Superuser or read-write permission is required to use Audit Partial Configurations. The Select Device(s) drop-down list box is populated only with devices with read-write access. The group drop-down list box is populated with device groups with read-write access.
Import	X	X	—	—	Read-write permission is required for a user to import a configuration into the JUNOScope repository. Importing a configuration does not have any association with a device, therefore the user group requirement for import is read-write access for any device.
Compare	X	X	X	X	Read-write or read-only permission is required for a user to compare configuration file versions in the JUNOScope repository. The Device drop-down list box is populated only with devices with read-write or read-only access.
Display	X	X	X	X	Read-write or read-only permission is required for a user to view a configuration file in the JUNOScope repository. The Device drop-down list box is populated only with devices with read-write or read-only access.
Load Configuration	X	X	—	—	Read-write permission is required for a user to deploy an imported configuration file to multiple routers and perform a simultaneous update of configurations on these devices. The Select Device(s) drop-down list box is populated only with devices with read-write access. The group drop-down list box is populated with device groups with read-write access.
Restore	X	X	—	—	The Device drop-down is populated only with devices with read-write access.
Delete	X	X	—	—	Superuser or read-write permission is required to delete an imported configuration file. The name column lists the imported configuration files in the CVS repository.
Edit	X	X	—	—	Superuser or read-write permission is required to edit a configuration file. The Configuration File drop-down list box lists archived configuration files and the Device drop-down list box lists the devices from which the configuration file has been archived.
Save	X	X	—	—	Superuser or read-write permission is required to save a configuration file to a local machine. The Configuration File drop-down list box lists archived configuration files and the Device drop-down list box lists the devices from which the configuration file has been archived.
Scripts	X	X	—	—	Superuser or read-write permission is required to manage JUNOS-based scripts. JUNOS-based scripts such as commit scripts, operation (op) scripts, and event scripts can be imported into the JUNOScope CVS repository from the local file system and deployed to a group of routers.You can also view, edit, compare, and disable these scripts.
Inventory Management
Scan	X	—	—	—	The Group and the Select Device(s) drop-down is populated only with groups or devices with read-write access.
Reports > Inventory	X	X	X	X	The Device drop-down in the Search and Advanced Query dialog boxes are limited to those devices with read or read-write access. In the Custom Report page, only those reports created by users in the same user group are visible. Read-only users cannot save or delete custom reports.
Reports > Demo	X	X	X	X	Read-only users cannot save or delete custom reports.
Repository > Schedule	X	X	—	—	Superuser or read-write permission is required.
Repository > View	X	X	—	—	Superuser or read-write permission is required.
Software Manager
Images	X	—	—	—	Device read-write access is required for users in a user group to perform operations, including image import, download, install, and delete.
Monitor
Operations	X	X	X	X	Only those operations scheduled by users in the same user group are visible. Users in the Administrator user group can view all operations. Read-only users cannot delete operations.
Status	X	X	X	X	The Group and Selected Device drop-down list boxes are limited to those devices with read-only or read-write access. Even when All Devices is selected, a subset of the device operation status is shown, based on the user group. Users in the administrator user group can view all status.
Audit Log	X	—	—	—	Users in the administrator user group can only view Audit Log events.
Purge	X	—	—	—	Users in the administrator user group can purge Status records and Audit Log events.
Settings
Authentication Information	X	—	—	—	Only users in the administrator user group can view this page.
Access Methods	X	—	—	—	Only users in the administrator user group can view this page.
Devices	X	—	—	—	Only users in the administrator user group can view this page.
Groups	X	—	—	—	Only users in the administrator user group can view this page.
Labels	X	—	—	—	Only users in the administrator user group can view this page.
Schedules	X	—	—	—	Only users in the administrator user group can view this page.
Users > Local Authentication	X	—	—	—	Only users in the administrator user group can view this page.
Users > User Group Authorization	X	—	—	—	Only users in the administrator user group can view this page.
User > Authentication Policy > Global Authentication	X	—	—	—	Only users in the administrator user group can view this page.
User > Authentication Policy > User Authentication Policy	X	—	—	—	Only users in the administrator user group can view this page.
RADIUS Configuration	X	—	—	—	Only users in the administrator user group can view this page.
Import/Export Data	X	—	—	—	Only users in the administrator user group can view this page.
Saved Operations	X	X	—	—	Only those operations saved by users in the same user group are visible in the Available Operations list box, in the Add Compound Operations dialog box.

OK button—Adds the user to the JUNOScope software database and redisplays the Users—Local Authentication dialog box with the new username and permissions listed in the table.

Cancel button—Clears this dialog box without adding a new user and redisplays the Users—Local Authentication.

[Contents] [Prev] [Next] [Index] [Report an Error]