cc/td/doc/product/dsl_prod/vrmgtsw/vr4ov/rel240
hometocprevnextglossaryfeedbacksearchhelp
PDF

Table of Contents

User Account Administration

User Account Administration

This chapter explains how to add, modify, or delete users and how to add or modify user passwords. It also explains the different levels of user security that ViewRunner for HP OpenView provides.

For the purposes of this guide, the term "user" refers to any user of the Cisco ViewRunner software, not to the specific security level described in this section.

11.1 Understanding User Security Levels

ViewRunner for HP OpenView provides three levels of user security:

Administrators are the only users who can create or move locations and can move Cisco 6100 Series systems from the New Equipment window to a Wire Center, or between Wire Centers.

Administrator, Operator, and Guest users all can use ViewRunner for HP OpenView to do the following tasks. Operators and Guests, however, can be restricted to specific Wire Centers.


Note All users can be restricted to actions within specific Wire Centers. However, restricting Administrators is a self-imposed restriction, because Administrators can change the Wire Center access restrictions for any user, including their own.

Table 11-1 outlines specifically what each level of user security allows.


Table 11-1: User Administration Privilege Levels
User Action Administrator Operator Guest

Create Location

Yes

No

No

Delete Location

Yes

No

No

Create Wire Center

Yes

No

No

Delete New Equipment Wire Center

No

No

No

Delete Wire Center

Yes

No

No

Add Cisco 6100 Series system to:

  • New Equipment Wire Center

  • Wire Center

Yes

Only if the Wire Center is in the operator's Allowed Locations list and the operator has permission to add Cisco 6100 Series systems

No

Delete Cisco 6100 Series
system from:

  • New Equipment Wire Center

  • Wire Center

Yes

Only if the Wire Center is in the operator's Allowed Locations list and the operator has permission to delete Cisco 6100 Series systems

No

Move Cisco 6100 Series from:

  • One Wire Center to another

  • New Equipment Wire Center to a Wire Center

  • Wire Center to the New Equipment Wire Center

Yes

Only if both Wire Centers are in the operator's Allowed Locations list and the operator has permission to add Cisco 6100 Series systems to and delete Cisco 6100 Series systems from Wire Centers

No

View Cisco 6100 Series
system Information

All

Cisco 6100 Series systems in unrestricted Locations only

Cisco 6100 Series systems in unrestricted Locations only

Map configuration options:

  • Add Cisco 6100 Series systems to Wire Centers

  • Delete Cisco 6100 Series systems from Wire Centers

All

Cisco 6100 Series systems in unrestricted Locations only (add and delete permissions can be explicitly granted or denied)

No

Move Wire Center to a
new Location

Yes

No

No

Move Locations under a
different Location

Yes

No

No

User Permissions

  • Configure Chassis

  • Configure Module

  • Configure Subscriber

  • Configure Pool

  • Add 6100

  • Delete 6100

  • Save 6100 Configuration

  • Restore 6100 Configuration

  • Download 6100 Software

  • Restricted 6100 Settings

All

Cisco 6100 Series systems in unrestricted Locations only (permissions for each option can be explicitly granted or denied)

No

Remove Cisco 6100 Series system from Subtend Group

Yes

No

No

Create or Delete Subtend Location

Yes

No

No

Create or Delete Subtend Group

Yes

No

No

Create or Delete
Subtend Connection

Yes

No

No

Add to new Subtend Group

Yes

No

No

Paste Cisco 6100 Series system into Subtend Group

Yes

No

No

11.2 Accessing ViewRunner for HP OpenView

When ViewRunner is installed, it creates a single Administrator account with the login ID of vradmin and a password of cisco123. To guarantee that there is always one user account defined in the system, this account cannot be deleted. After you install ViewRunner, change the password to something other than the default to protect the system from unauthorized access.

To access the ViewRunner for HP OpenView program the first time, you should start HP OpenView from the command line of the host that is running the HP OpenView Network Node Manager (NNM). Use the following steps:

Step 1 Login to the host running the HP OpenView Network Node Manager. (In this example, the host is called "centerice.")

Step 2 Source the proper .cshrc file by entering the following sequence of commands in a UNIX xterm window:

    centerice:1> cd /opt/CSCOvrovc/env
    centerice:2> source vrc.cshrc
    centerice:3> cd ~
    centerice:4> ovw &
     
    

Step 3 Enter ovw & at the command prompt. HP OpenView starts, and the ViewRunner Login Window dialog box appears, as shown in Figure 11-1.


Figure 11-1: ViewRunner Login Window



Table 11-2: ViewRunner Login Field Definitions
Field Description

Login ID

Prompts you for your user name.

Password

Prompts you for your password.


Note If you are not the Administrator, and the Administrator has not created a valid ID and password for you, you are not able to log in to ViewRunner for HP OpenView.

Table 11-2 provides the login field definitions. The preceding fields are both case sensitive and are limited to a maximum of 11 characters. In addition, the password selection has the following requirements:

Step 4 Enter your login name and password.

The system defaults for Login ID and Password are vradmin and cisco123.

Caution Be sure to change the default password to limit access to the system once you are logged in.

11.3 Adding Users

To add users you need to access the ViewRunner Administration Window, shown in Figure 11-2. From the Root window menu bar, select ViewRunner Administration from the Security menu to bring up this window. (Also see the "Using the Menu Bar to Define Users" section.)


Figure 11-2: ViewRunner Administration Window


The field definitions for the ViewRunner Administration Window are described in Table 11-3.


Table 11-3: ViewRunner Administration Window Field Definitions
Field Description

User Name

Displays the name of a user.

Permission Level

Displays the permission level for this user---either Guest, Operator, or Administrator.

Full Name

Displays the full name of the user.


Note The options to Modify or Delete a user are dimmed initially on the ViewRunner Administration Window. If you wish to modify user settings or delete a user, you must select a user in the list of current users to activate those options.

The ViewRunner Administration Window contains a list of all the current users. To add a user, follow the instructions in the following steps. Figure 11-3 shows an example of the Add User
dialog box.

Step 1 Click Add. The Add User dialog box appears.


Figure 11-3: Add User Dialog Box


Step 2 Enter the name of the new user in the User Name field.

User names cannot be longer than twelve keyboard characters. Blank characters
are permitted.

Step 3 Assign a permission level to the user by selecting an option for the list box to the right of the Permission Level field.

A list box appears with three options: Guest, Operator, and Administrator. Select one.

Step 4 Enter the complete name of the user in the Full Name field.

Step 5 Set the account security options for an administrator or operator by selecting all or any combination of the following configuration options:

Step 6 To assign Wire Center rights for the user, select from the list of available Wire Centers. Then move Wire Centers from the Denied Wire Centers area to the Allowed Wire Centers area by selecting a location then clicking Allow.

To restrict Wire Center rights altogether, click the Restrict Wire Centers field. This dims the list of available Wire Centers.

Step 7 Assign an initial password to a new user by clicking Set Initial Password. Figure 11-4 shows an example of the window that appears.


Figure 11-4: Change Password Window


Step 8 Enter the password in the New Password field.

Step 9 Enter the password again in the Confirm field. Click OK.

The administrator can create a user account with no password assigned. In that case, the ViewRunner Login Window reappears when a user who is not assigned an initial password attempts to log in for the first time. In that window, the user must supply a new password and confirm it.

Step 10 Click Apply to apply all the new settings for the newly created user.

Step 11 Click OK to return to the Root window.

11.4 Modifying and Deleting Users

An administrator can modify user settings or delete users. Use the following steps and the example in Figure 11-5 to modify user settings or delete users.

Step 1 At the ViewRunner Administration Window, select the user name you want to modify or delete. This activates the Modify and Delete buttons.


Figure 11-5: ViewRunner Administration Window


Step 2 To delete the user, click Delete.

The administrator can delete multiple users using the mouse and Ctl-Shift to select more than one user before clicking Delete.

Notice that in Figure 11-5, the Delete button is dimmed because the user selected was vradmin, a user name that cannot be deleted.

Step 3 To modify user settings, click Modify.

The Modify User dialog box appears, displaying the settings that can be modified (see Figure 11-6). An administrator can change the permissions to change what the user is or is not allowed to configure and can also change location restrictions if desired.


Figure 11-6: Modify User Dialog Box


An administrator can also change a user's password if desired.

Step 4 Click Change Password to open the Change Password window, shown in Figure 11-7.


Figure 11-7: Change Password Window


11.5 Using the Menu Bar to Define Users

To define additional administrator, operator, and guest accounts after initial access, select the Security menu from the Root window menu bar. Then select the User Administration option from the menu. Figure 11-8 shows an example of the Root window menu bar.


Figure 11-8: ViewRunner Root Menu


The ViewRunner Administration Window appears (see Figure 11-2). Follow the instructions in the "Adding Users" section and the "Modifying and Deleting Users" section to add, delete, or modify users.

11.6 Changing Passwords

To change a user's password, select the Security menu from the Root window menu bar. Then select the Change Password option. The Change Password window appears, as shown in Figure 11-9.


Figure 11-9: Change Password Window


Enter the old and new passwords in the specified fields. Confirm the new password by entering it again in the Confirm field. To accept, click OK.


Note Passwords must contain at least six characters, at least two of which must be alphabetic and one of which must be a numeric or special character. In addition, the password must not contain the user's name in any order.

11.7 Disabling Users

An administrator can disable any user (other than vradmin) by changing the User Enabled button in the Modify User dialog box (see Figure 11-10). If the user is currently logged in, the session terminates immediately, and the user is no longer able to log in. When an administrator reenables a user, the user is able to log in again.


Figure 11-10: Modify User Dialog Box



hometocprevnextglossaryfeedbacksearchhelp
Posted: Fri Oct 8 13:52:48 PDT 1999
Copyright 1989-1999©Cisco Systems Inc.