Modifying the Configuration Database › Using the Command Line Interface to the Configuration Editor › Add Users › Granting Privileges

Granting Privileges

The root or system account (depending on the operating system you are using) has all the Console Manager privileges by default. You cannot change this information as there is no entry in the configuration database for this account. If you do create an entry for user root or system, Console Manager will ignore it, and use the default.

Unless a user has an entry in the configuration database, they are not allowed to perform any of the Console Manager functions.

Note: It is important to realize that granting a user privileges to edit the configuration database allows that user to set all other privileges for both themselves and any other user.

Note the following rule regarding usernames:

Console Manager automatically uppercases the username when a user starts the various interfaces in order to check for a match against the user authorization file entry.

Add Security Profiles

You will need to create security profiles if any of the following apply to your configuration:

• You have configured your terminal/console servers with a specific username and/or password.
• You have configured your terminal/console servers to use publickey authentication and you want to use a unique identity.
• You have protected the private key with a passphrase.

To define a security profile, use the Add Security_Profile command.

To add a security profile

1. Start the configuration editor as described in the section, Starting the Configuration Editor:
2. Type:

   CM Edit> add security_profile
   

3. Type the name of the security profile you are creating:

   Security profile name: JSMITHsecure

4. Type a description of the security profile:

   Information: John Smith, System Manager

5. Type the name of the account username:

   Username (): SMITHJ

6. Type the password for the user on the system:

   Password ():

7. Type the passphrase for the security profile:

   Passphrase ():

8. Type the logical name that equates to the file specification of the key/identity file. If you do not specify a logical name, the default file specification of SYS$SYSROOT:[SYSMGR.SSH2]IDENTIFICATION. will be used.

   For more information about this logical name see the chapter "Set up the Environment".

9. You are asked if it is okay to add the security profile:

   OK to add? [Y/N (Y)):