User Account Administration

User Account Administration Overview

Guidelines for User Account Administration

Maintaining User Accounts

Changing the Administrator Password

Adding Users

Modifying and Deleting Users

Defining Users with the HP OpenView Menu Bar

Changing User Passwords

Disabling Users

User Account Administration

User Account Administration Overview

This chapter explains how to add, modify, or delete users and how to add or modify user passwords. It also explains the different levels of user security that ViewRunner for HP OpenView provides.

As an HP OpenView Administrator, maintaining user accounts is a vital security and operational function. The procedures in this section guide you in designating new users and disabling old users. Each level of user described here represents a different level of system access.

Guidelines for User Account Administration

Note the following guidelines for user account administration:

The term user refers to any user of the Cisco ViewRunner HP OpenView software, not to the specific security level described in this section.
When ViewRunner is installed, it creates a single Administrator account with the login ID of vradmin and a password of cisco123. To guarantee that there is always one user account defined in the system, this account cannot be deleted.
ViewRunner for HP OpenView provides three levels of user security:
- Administrator---these users have read-write access to ViewRunner for HP OpenView. They can make changes to the system, and they can add, delete, modify, and disable users. They can also change users' passwords. (Users can change their own passwords by using the Security > Change Password menu option.)
ViewRunner logs out disabled users immediately, and they cannot log back in until they have been reenabled.

Administrators are the only users who can create or move locations and can move Cisco 6100 Series systems from the New Equipment window to a Wire Center, or between Wire Centers.
- Operator---these users have read-write access to the Cisco 6100 Series system and can make configuration changes (as defined by the Administrator), but cannot set up additional users or change passwords.
- Guest---these users have read-only access to the Cisco 6100 Series system and cannot make any configuration changes to ViewRunner for HP OpenView or the Cisco 6100 Series system.
An Administrator can restrict read-write access for operators and read-only access for guests to certain Wire Centers.
Administrators can change the Wire Center access restrictions for any user, including their own.
Administrator, Operator, and Guest users can use ViewRunner for HP OpenView to
- Automatically discover (identify) Cisco equipment.
- Collect configuration and status information about the Cisco 6100 Series system.
- Collect, filter, store, and sort alarms from the Cisco 6100 Series system.
Login and password fields are both case-sensitive and are limited to a maximum of eleven characters.
The password selection cannot contain the user name in any order, and must contain at least
- Six characters
- Two alphabetic characters
- One numeric or special character
The system defaults for Login ID and Password are vradmin and cisco123, respectively.
User names cannot be longer than twelve keyboard characters. ViewRunner permits blank characters.

Table 11-1 outlines specifically what each level of user security allows.

Table 11-1: User Administration Privilege Levels

User Action Administrator Operator Guest

Create Location

Yes

No

No

Delete Location

Yes

No

No

Create Wire Center

Yes

No

No

Delete New Equipment Wire Center

No

No

No

Delete Wire Center

Yes

No

No

Add Cisco 6100 Series system to:

New Equipment Wire Center

Wire Center

Yes

Only if the Wire Center is in the operator's Allowed Locations list and the operator has permission to add Cisco 6100 Series systems

No

Delete Cisco 6100 Series system from:

New Equipment Wire Center

Wire Center

Yes

Only if the Wire Center is in the operator's Allowed Locations list and the operator has permission to delete Cisco 6100 Series systems

No

Move Cisco 6100 Series from:

One Wire Center to another

New Equipment Wire Center to a Wire Center

Wire Center to the New Equipment Wire Center

Yes

Only if both Wire Centers are in the operator's Allowed Locations list and the operator has permission to add Cisco 6100 Series systems to and delete Cisco 6100 Series systems from Wire Centers

No

View Cisco 6100 Series system information

All

Cisco 6100 Series systems in unrestricted Locations only

Cisco 6100 Series systems in unrestricted Locations only

Map configuration options:

Add Cisco 6100 Series systems to Wire Centers

Delete Cisco 6100 Series systems from Wire Centers

All

Cisco 6100 Series systems in unrestricted Locations only (add and delete permissions can be explicitly granted or denied)

No

Move Wire Center to a new Location

Yes

No

No

Move Locations under a different Location

Yes

No

No

User Permissions

Configure Chassis

Configure Module

Configure Subscriber

Configure Pool

Add 6100

Delete 6100

Save 6100 Configuration

Restore 6100 Configuration

Download 6100 Software

Restricted 6100 Settings

All

Cisco 6100 Series systems in unrestricted Locations only (permissions for each option can be explicitly granted or denied)

No

Remove Cisco 6100 Series system from Subtend Group

Yes

No

No

Create or Delete Subtend Location

Yes

No

No

Create or Delete Subtend Group

Yes

No

No

Create or Delete Subtend Connection

Yes

No

No

Add to new Subtend Group

Yes

No

No

Paste Cisco 6100 Series system into Subtend Group

Yes

No

No

User Action	Administrator	Operator	Guest
Create Location	Yes	No	No
Delete Location	Yes	No	No
Create Wire Center	Yes	No	No
Delete New Equipment Wire Center	No	No	No
Delete Wire Center	Yes	No	No
Add Cisco 6100 Series system to: New Equipment Wire Center Wire Center	Yes	Only if the Wire Center is in the operator's Allowed Locations list and the operator has permission to add Cisco 6100 Series systems	No
Delete Cisco 6100 Series system from: New Equipment Wire Center Wire Center	Yes	Only if the Wire Center is in the operator's Allowed Locations list and the operator has permission to delete Cisco 6100 Series systems	No
Move Cisco 6100 Series from: One Wire Center to another New Equipment Wire Center to a Wire Center Wire Center to the New Equipment Wire Center	Yes	Only if both Wire Centers are in the operator's Allowed Locations list and the operator has permission to add Cisco 6100 Series systems to and delete Cisco 6100 Series systems from Wire Centers	No
View Cisco 6100 Series system information	All	Cisco 6100 Series systems in unrestricted Locations only	Cisco 6100 Series systems in unrestricted Locations only
Map configuration options: Add Cisco 6100 Series systems to Wire Centers Delete Cisco 6100 Series systems from Wire Centers	All	Cisco 6100 Series systems in unrestricted Locations only (add and delete permissions can be explicitly granted or denied)	No
Move Wire Center to a new Location	Yes	No	No
Move Locations under a different Location	Yes	No	No
User Permissions Configure Chassis Configure Module Configure Subscriber Configure Pool Add 6100 Delete 6100 Save 6100 Configuration Restore 6100 Configuration Download 6100 Software Restricted 6100 Settings	All	Cisco 6100 Series systems in unrestricted Locations only (permissions for each option can be explicitly granted or denied)	No
Remove Cisco 6100 Series system from Subtend Group	Yes	No	No
Create or Delete Subtend Location	Yes	No	No
Create or Delete Subtend Group	Yes	No	No
Create or Delete Subtend Connection	Yes	No	No
Add to new Subtend Group	Yes	No	No
Paste Cisco 6100 Series system into Subtend Group	Yes	No	No

Maintaining User Accounts

The following procedures allow the Administrator user to monitor and maintain all Operator and Guest users accessing the ViewRunner HP OpenView software at different Wire Centers.

These procedures include

Assigning, changing, and deleting passwords
Adding, deleting, modifying, and disabling users

Changing the Administrator Password

Step 1 After you install ViewRunner, change the password to something other than the default to protect the system from unauthorized access.

Step 2 Start HP OpenView from the command line of the host that is running the HP OpenView Network Node Manager (NNM).

Step 3 Login to the host running the HP OpenView Network Node Manager. (In the following example, the host is called "centerice.")

Step 4 Source the proper .cshrc file by entering the following sequence of commands in a UNIX xterm window:

centerice:1> cd /opt/CSCOvrovc/env
centerice:2> source vrc.cshrc
centerice:3> cd ~
centerice:4> ovw &

Step 5 Enter ovw & at the command prompt. HP OpenView starts, and the ViewRunner Login window appears, as shown in Figure 11-1.

Step 6 Enter your login name and password. The system defaults for Login ID and Password are vradmin and cisco123, respectively.

Figure 11-1: ViewRunner Login Window

Table 11-2 provides the Login field definitions.

Table 11-2: ViewRunner Login Field Definitions

Field Description

Login ID

Prompts you for your user name.

Password

Prompts you for your password.

Field	Description
Login ID	Prompts you for your user name.
Password	Prompts you for your password.

Note If you are not the Administrator, and the Administrator has not created a valid ID and password for you, you cannot log in to ViewRunner for HP OpenView.

Caution Be sure to change the default password to limit access to the system once you are logged in.

Adding Users

To add users, you need to access the ViewRunner Administration window, shown in Figure 11-2. From the Root window menu bar, select ViewRunner Administration from the Security menu to bring up this window. (Also see the "Defining Users with the HP OpenView Menu Bar" section.)

Figure 11-2: ViewRunner Administration Window

The field definitions for the ViewRunner Administration window are described in Table 11-3.

Table 11-3: ViewRunner Administration Window Field Definitions

Field Description

User Name

Displays the name of a user.

Permission Level

Displays the permission level for this user---either Guest, Operator, or Administrator.

Full Name

Displays the first and last name of the user.

Field	Description
User Name	Displays the name of a user.
Permission Level	Displays the permission level for this user---either Guest, Operator, or Administrator.
Full Name	Displays the first and last name of the user.

Note The Modify and Delete buttons appear dimmed initially on the ViewRunner Administration window. If you want to modify user settings or delete a user, you must select a user in the list of current users. When you select a user, ViewRunner activates the Modify and Delete options.

The ViewRunner Administration window contains a list of all the current users. To add a user, follow these steps.

Step 1 Click Add. The Add User dialog box appears. See Figure 11-3.

Figure 11-3: Add User Dialog Box

Step 2 Enter the name of the new user in the User Name field.

User names cannot be longer than twelve keyboard characters. ViewRunner permits blank characters.

Step 3 Assign a permission level to the user by selecting an option for the list box to the right of the Permission Level field.

A list box appears with three permission levels: Guest, Operator, and Administrator. Choose one.

Note that if the user permission level is Guest, the User Permissions list to the right of the window is dimmed. Guests have read-only access, so they cannot perform any configurations.
If the user permission level is Operator, the User Permissions list is available for you to select what types of permissions you want to assign this operator.
If the user permission level is Administrator, by default all the permissions in the User Permissions list are checked, and therefore given to the new administrator.

Step 4 Enter the complete name of the user in the Full Name field.

Step 5 Set the account security options for an administrator or operator by selecting all or any combination of the following configuration options:

Configure Chassis
Configure Module
Configure Subscriber
Configure Pool
Add 6100
Delete 6100
Save 6100 Configuration
Restore 6100 Configuration
Download 6100 Software
Restricted 6100 Settings

Step 6 To assign Wire Center rights for the user, select a Wire Center from the list of available Wire Centers.

Step 7 Move Wire Centers from the Denied Wire Centers area to the Allowed Wire Centers area by selecting a location then clicking Allow.

To restrict Wire Center rights altogether, click the Restrict Wire Centers field. This dims the list of available Wire Centers.

Note The New Equipment window is defined as a special Wire Center that initially defaults to the defined permission level when a new user is created.

Step 8 Assign an initial password to a new user by clicking Set Initial Password. Figure 11-4 shows an example of the window that appears.

Figure 11-4: Change Password Window

Step 9 Enter the password in the New Password field.

Step 10 Enter the password again in the Confirm field. Click OK.

Note Passwords must contain at least six characters, at least two of which must be alphabetic and one of which must be a numeric or special character. In addition, the password must not contain the user's name in any order.

The administrator can create a user account with no password assigned. In that case, the ViewRunner Login window reappears when a user who is not assigned an initial password attempts to log in for the first time. In that window, the user must supply a new password and confirm it.

Step 11 Click Apply to apply all the new settings for the newly created user.

Step 12 Click OK to return to the Root window.

Modifying and Deleting Users

An administrator can modify user settings or delete users. Use the following steps and the example in Figure 11-5 to modify user settings or delete users.

Step 1 At the ViewRunner Administration window, select the user name you want to modify or delete. This activates the Modify and Delete buttons.

Figure 11-5: ViewRunner Administration Window

Step 2 To delete the user, click Delete.

The administrator can delete multiple users using the mouse and Ctl-Shift to select more than one user before clicking Delete.

Notice that in Figure 11-5, the Delete button is dimmed because the user selected was vradmin, a user name that cannot be deleted.

Step 3 To modify user settings, click Modify.

The Modify User dialog box appears, displaying the settings that can be modified (see Figure 11-6). An administrator can change the permissions to change what the user is or is not allowed to configure and can also change location restrictions if desired.

Figure 11-6: Modify User Dialog Box

An administrator can also change a user password if desired.

Step 4 Click Change Password to open the Change Password window, shown in Figure 11-7.

Figure 11-7: Change Password Window

Defining Users with the HP OpenView Menu Bar

To define additional administrator, operator, and guest accounts after initial access, select the Security menu from the Root window menu bar. Then select the User Administration option from the menu. Figure 11-8 shows an example of the Root window menu bar.

Figure 11-8: ViewRunner Root Menu

The ViewRunner Administration window appears (see Figure 11-2). Follow the instructions in the "Adding Users" section and the "Modifying and Deleting Users" section to add, delete, or modify users.

Changing User Passwords

To change a user password, select the Security menu from the Root window menu bar. Then select the Change Password option. The Change Password window appears, as shown in Figure 11-9.

Figure 11-9: Change Password Window

Enter the old and new passwords in the specified fields. Confirm the new password by entering it again in the Confirm field. To accept, click OK.

Disabling Users

An administrator can disable any user (other than vradmin) by deselecting User Enabled in the Modify User dialog box (see Figure 11-10). If the user is currently logged in, the session terminates immediately, and the user is no longer able to log in. When an administrator reenables a user, the user is able to log in again.

Figure 11-10: Modify User Dialog Box

Table of Contents

User Account Administration