You can grant extra access rights and privileges to selected users when they log on to
Security Center through specific Security Desk workstations.
Before you begin
Before you can configure a workstation with access rights and privileges, you must
connect Security Desk to the Directory at least
once from that workstation. You can do so with any user account. This creates a
workstation entity (
) in the system that you can later configure.
What you should know
- You configure the access rights and privileges of a workstation with the
Workstation management task.
- The Workstation management task is only available to Security Center administrators.
- A workstation affects the access rights and privileges of a user the same way that a
parent user group does.
- A workstation affects the access rights and privileges of a user only if the user is
connected through Security Desk and is part
of the workstation's user list.
Procedure
-
(First use only) Enable the Workstation management feature.
-
From the Config Tool homepage, open
the System task.
-
Click and select Workstation management.
-
Click Apply.
-
Restart Config Tool.
The Workstation management task is now available in the
Config Tool homepage.
-
From the Config Tool homepage, open the
Workstation management task.
-
Click Workstation ().
The workstation creation wizard opens.
-
In the Workstation information page, select the workstation you
want to configure.
Only Security Desk workstations that are
not yet configured are listed.
-
Click .
The selected workstation (
) is added to the list of configured workstations.
-
(Optional) Click the Identity tab and give the workstation a
more meaningful name.
By default, the workstation is given the computer's name.
-
Click the Access rights tab, select the partitions that you want
the user of this workstation to inherit, and then click
Apply.
NOTE: A user can inherit more access rights from the workstation, but what they already
have cannot be removed. If the existing partitions do not provide the exact access
rights you want to grant to the user, create a partition for what you need.
-
Click the Privileges tab, configure the privileges that you want
to add or deny from the users of this workstation, and then click
Apply.
NOTE: You can only add a privilege to a user if that privilege is undefined for that user,
but you can always deny a privilege that a user currently has.
-
Click the User access tab, and add the users and user groups you
want this workstation to affect.
Results
Now, whenever a user from the workstation's user list uses Security Desk to connect to the Directory through this
workstation, the access rights and privileges configured for this workstation will be combined
to the access rights and privileges of that user.
NOTE: You must recreate the workstation
entity if you change the physical machine, even if you keep the same domain
name.