8.1 Adding a User

Adding a user in the Sentinel Log Manager system creates an application user who can then log in to the Sentinel Log Manager application.

  1. Log in to the Sentinel Log Manager as an administrator.

  2. Click the users link in the upper left corner of the page.

    The Users tab is displayed in the right pane of the page.

  3. Click Add a user.

  4. Specify the name and e-mail address of the user. The e-mail address format is validated.

    The fields with an asterisk (*) are mandatory, and the username must be unique. If the username already exists with the specified name, a Username taken message is displayed.

  5. Specify one of the following options to give more granular permissions for the user to control the Sentinel Log Manager system.

    Only an administrator can provide these permissions to a user.

    Administrator: Selecting this option gives administrative rights to the user in the Sentinel Log Manager system. Administrator rights include the ability to perform the following functions:

    • User administration

    • Data collection

    • Data storage

    • Rules management

    • Report management

    • Search operations

    • License management

    Report Administrator: Selecting this option allows the user to have administrative rights for reports, which also includes the Auditor rights. Report administrator rights include the ability to perform the following functions:

    • Search reports

    • Run reports

    • View reports

    • Add and delete Report Templates and Report results

    • Export all reports

    • Export results

    • Save as report

    NOTE: A user who has Report Administrator rights cannot access the collections, storage, rules, and users configuration links.

    Auditor: Selecting this option gives the auditor rights to the users in Sentinel Log Manager system. Auditor rights include the ability to perform the following functions:

    • Search reports

    • Run reports

    • View reports

    • Delete report results

    • Rename report results

    • Select multiple reports

    NOTE: A user who has Auditor rights cannot delete report templates, cannot access the Export All Reports, export results, and save as report links, and cannot access the collections, storage, rules, and users configuration links.

  6. The following options appear only when the Auditor option is selected:

    View reports created by all users: Select this option to allow access to all the reports available on the Sentinel Log Manager server.

    Enable Sentinel Log Manager configuration reporting: Select this option to run the reports if you are using SQL queries in the report definition.

  7. Select the authentication type.

    Local: By default, the Local option is selected.

    Directory: The Directory option is enabled only if the user has configured LDAP authentication. For more information about configuring LDAP authentication, see Configuring Sentinel Log Manager Server for LDAP Authentication.

    If you select Directory option, specify the same username as the eDirectory username or Active Directory sAMAccountName in the Username field. The user’s password is authenticated with the LDAP credentials.

  8. Specify a filter value in the Security Filter field to filter the events that a user can view.

    To allow a user to view all the events select the Allow all events radio button.

    To set a filter, click the Tips link to use the tag names defined in the table.

    For example, if you set the filter value to sev:5, the user can view only events of severity five for a search.

    For more information on each of these event fields, see Section C.0, Event Fields.

  9. Specify a user name in the Username field.

    If this is a directory user, the name must match the eDirectory user name (if the directory is eDir) or the sAMAccountName (if the directory is Active Directory).

  10. Specify a password in the Password field.

  11. Re-enter the password in the Verify field.

  12. The Title, Office #, Mobile #, Fax #, and Ext. fields are optional. The phone number fields allow any format. Make sure you have entered a valid phone number so that the user can be contacted directly.

  13. Click Save.

The created user appears under the Users tab.