Chat now with support
Chat with Support

One Identity Management Console for Unix 2.5.2 - Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Management Console for Unix Installing Management Console for Unix Preparing Unix hosts Working with host systems Managing local groups Managing local users Active Directory integration Authentication Services integration Privilege Manager integration
Getting started Configure a primary policy server Configure a secondary policy server Install PM agent or Sudo plugin on a remote host Security policy management
Opening a policy file Edit panel commands Editing PM policy files Reviewing the Access and Privileges by User report Reviewing the Access and Privileges by Host report
Event logs and keystroke logging
Reporting Setting preferences
User preferences System preferences
Security Troubleshooting tips
Auto profiling issues Active Directory Issues Auditing and compliance Cannot create a service connection point Check Authentication Services agent status commands not available CSV or PDF reports do not open Database port number is already in use Elevation is not working Hosts do not display Import file lists fakepath Information does not display in the console License information in report is not accurate Out of memory error Post install configuration fails on Unix or Mac Privilege Manager feature issues Profile task never completes questusr account was deleted Readiness check failed Recovering from a failed upgrade Reports are slow Reset the supervisor password Running on a Windows 2008 R2 domain controller Service account login fails Setting custom configuration settings Single Sign-on (SSO) issues JVM memory tuning suggestions Start/stop/restart Management Console for Unix service Toolbar buttons are not enabled UID or GID conflicts
System maintenance Command line utilities Web services Database maintenance About us

Set up console access by role

After you Configure Console for Active Directory Logon, the setup wizard displays the Set up console access by role dialog.

To add Active Directory users or groups to the console access list

  1. On the Set up console access by role dialog, click Add to specify the Active Directory users and groups that you want to have access to the features available in Management Console for Unix.
  2. On the Select Users and Groups dialog, use the search controls to find and select Active Directory users or groups. Select one or more objects from the list and click OK.

    The mangement console adds the selected objects to the list on the Set up console access by role dialog.

    By default the mangement console assigns users to All Roles, which gives those accounts permissions to access and perform all tasks within the console. (See Console Roles and Permissions system settings for details.)

  3. Click in the Roles cell to activate a drop-down menu from which you can choose a role for the user account.

    Note: During the initial set up, you can only assign one role per user. Add additional roles to a user in System Settings. See Adding (or Removing) role members for details.

  4. Click Next to save your selections.

    The Identify Console dialog opens.

Set Up Console Access by Role dialog

Use this dialog to define the Active Directory accounts that you want to access the mangement console and all its features.

Table 3: Set Up Console Access dialog
Option Description
Add AD users or groups that can access the mangement console and select their role
Account The Active Directory user accounts that have access to the mangement console and its features. By default, the setup wizard adds the user accounts entered on the Configure Console for Active Directory dialog to the access list.
Role The role assigned to each account. What a user sees in the mangement console is based on the rules that pertain to the role the user is assigned. A user can only access and perform tasks specified for his role.

Click the Add button to add additional Active Directory accounts to the user access list.

NOTE: At least one account with access is required. (Refer to Console Roles and Permissions system settings for a description of the roles.)

Click the Role box and open the drop-down menu to choose a role.

Remove Select an account from the list and click Remove to remove the account from the user access list.

Identify console

The setup wizard displays the Identify Console dialog during the post-installation configuration steps. The Authentication Services Control Center uses this information to identify this mangement console. Hosts configured for automatic profiling or automatic QAS agent status also use this information to contact the mangement console server.

To identify the mangement console

  1. On the Identify Console dialog, modify the information about this mangement console, if necessary, and click Next to open the Set supervisor password dialog.

    Note: You can modify these settings from Settings | System settings | General | Console Information. See Console Information settings for details.

Identify Console dialog

Both users and remote hosts use the host address set on the Identify Console dialog to find and identify this mangement console on the network.

Note: The Control Center also uses the console information to find and identify this mangement console.

Table 4: Identify Console dialog
Option Description
Console host address Enter the URL to access this mangement console
Console name (Optional) Enter the name of the computer where this mangement console was installed. The mangement console pre-populates this with the computer's DNS name, but you can modify this to identify the computer.
Contact (Optional) Enter the user name of the contact person responsible for installing or maintaining this mangement console.
Description (Optional) Enter a brief description to identify this mangement console on the network.
Related Documents