Managing QPM Users

QoS Policy Manager (QPM) controls access to the QoS database using Windows NT user administration services.

These sections describe how to manage user access to QPM:

Understanding QPM User Authorization

QPM uses Windows NT local user groups to manage authorization. These groups are managed through the Windows NT User Manager administrative tool.

When you install the complete version of QPM, you choose the names of the groups used for QPM authorization. These groups always reside on the machine that is running the QoS Manager service. There are two QPM groups:

User group---The QPM user group manages read-write access to QoS databases. If you accepted QPM defaults during installation, this group is named QPM_Users, and it contains a default user named QPM_User with no password. To maintain security, you should delete this user account or give it a password, and add user accounts for each person who should have read-write access. Alternatively, during installation you can choose an existing Windows NT local group to use for read-write authorization. You can change the user group by rerunning the QPM setup program.
Guest group---The QPM guest group manages read-only access to QoS databases. Guest users can do everything in QPM except save databases and apply jobs. If you accepted QPM defaults during installation, this group is named QPM_Guests. QPM does not add any users to this group. During installation, you can choose an existing Windows NT local group to use for read-only authorization. You can change the guest group by rerunning the QPM setup program.

Adding or Removing QPM Users

You can add users to the QPM user or guest groups to give them access to QPM, or remove users to prevent access.

Procedure

Step 1
Click the User Manager button or select Tools>User Manager.

QPM starts the Windows NT User Manager program.

Step 2 Double-click the QPM user or guest group in the groups list:

Select the user group to manage read-write users. Unless you selected a different user group during QPM installation, this group is called QPM_Users.
Select the guest group to manage read-only users. Unless you selected a different guest group during QPM installation, this group is called QPM_Guests.

User Manager opens the Local Group Properties window.

Step 3 Modify the list of members as desired:

To add a user, click Add. In the resulting window, select the user you want to add and click Add. You can search for users in various domains, and add more than one user at a time. When finished, click OK.
To remove a user, select the user and click Remove. The user is removed. If you remove a user by accident, click Cancel.

Tips

User Manager is a Microsoft administrative tool included with Windows NT. It is not a Cisco Systems program. You can start it directly; it can typically be found at Start>Programs>Administrative Tools>User Manager.
See the User Manager online help for more information on managing Windows NT local users and groups.
To give the default QPM user, QPM_User, a password, double-click QPM_User and enter a password in the resulting window.

Table of Contents