hmLoadTopic({
hmKeywords:"security model,users",
hmTitle:"Users",
hmDescription:"User management is part of the More section of the ESET PROTECT Web Console.",
hmPrevLink:"admin_access_rights.html",
hmNextLink:"admin_ar_create_native_user.html",
hmParentLink:"admin_access_rights.html",
hmBreadCrumbs:"<a href=\"using.html\">Using ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Main Menu<\/a> &gt; More &gt; <a href=\"admin_access_rights.html\">Access Rights<\/a>",
hmTitlePath:"Using ESET PROTECT On-Prem > ESET PROTECT On-Prem Main Menu > More > Access Rights > Users",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Users<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">User management is part of the <span class=\"f_UI\">More<\/span> section of the ESET PROTECT Web Console.<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"admin_ar_create_native_user.html\" class=\"topiclink hmlinklistitem\">Create a Native User<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"user_actions_and_details.html\" class=\"topiclink hmlinklistitem\">User actions and user details<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"protect_change_pass.html\" class=\"topiclink hmlinklistitem\">Change user password<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"admin_ar_map_group_to_domain_security_group.html\" class=\"topiclink hmlinklistitem\">Add a mapped domain security group<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"admin_ar_assign_user_a_permission_set.html\" class=\"topiclink hmlinklistitem\">Assign a Permission Set to a User<\/a><\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"admin_ar_two_factor_authentification.html\" class=\"topiclink hmlinklistitem\">Two-Factor Authentication<\/a><\/span><\/p>\n\r<p class=\"p_Normal\"> There are two user types:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"admin_ar_create_native_user.html\" class=\"topiclink\">Native Users<\/a>—User accounts created and managed from the ESET PROTECT Web Console.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><a href=\"admin_ar_map_group_to_domain_security_group.html\" class=\"topiclink\">Mapped Domain Security Groups<\/a>—User accounts managed and authenticated by Active Directory.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">A fresh ESET PROTECT On-Prem setup has the <span class=\"f_UI\">Administrator<\/span> (Native User with home group <span class=\"f_UI\">All<\/span> and access to everything) as the only user.<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">We do not recommend using this user account on a regular basis. We strongly advise that you <a href=\"admin_ar_create_native_user.html\" class=\"topiclink\">create another administrator account<\/a> or use Administrators from <a href=\"admin_ar_map_group_to_domain_security_group.html\" class=\"topiclink\">Mapped Domain Security Groups<\/a> with the Administrator Permission Set assigned to them. Use the default administrator account only as a backup option.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">You can also create additional users with narrower access rights based on your desired competencies.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Optionally, you can set up <a href=\"admin_ar_two_factor_authentification.html\" class=\"topiclink\">Two-Factor Authentication<\/a> for Native Users and Mapped Domain Security Groups. This will increase security when logging into and accessing ESET PROTECT Web Console.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"branch_office\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Branch office administrators solution<\/span><\/h2>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_example\" >\n\r<tr class=\"Table_example\">\n\r<td class=\"Table_example\" style=\"width:4px; background-color:#77BB1A;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_example\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Example\" title=\"Example\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/example.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_example\"><p class=\"p_Normal\">If a company has two offices, each with local administrators, they need to be assigned with more permission sets for different groups.<\/p>\n\r<p class=\"p_Normal\">Let\'s say there are administrators <span class=\"f_Path\">John<\/span> in <span class=\"f_Path\">San Diego<\/span> and <span class=\"f_Path\">Larry<\/span> in <span class=\"f_Path\">Sydney<\/span>. Both of them need to take care only of their local computers, use <span class=\"f_UI\">Dashboard, Policies, Reports<\/span> and <span class=\"f_UI\">Dynamic Groups Templates<\/span> with their machines. The main <span class=\"f_Path\">Administrator<\/span> must follow these steps:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span><span class=\"f_NormalList\">Create new <a href=\"admin_create_new_static_subgroup.html\" class=\"topiclink\">Static Groups<\/a>: <\/span><span class=\"f_Path\">San Diego office<\/span><span class=\"f_NormalList\">, <\/span><span class=\"f_Path\">Sydney office.<\/span><span class=\"f_NormalList\"> <\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>Create new <a href=\"admin_ar_permissions_sets.html\" class=\"topiclink\">Permission sets<\/a>:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 40px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">a)<\/span><span class=\"f_UI\">Permission set<\/span><span class=\"f_NormalList\"> called <\/span><span class=\"f_Path\">Sydney permission set<\/span><span class=\"f_NormalList\">, with Static Group <\/span><span class=\"f_Path\">Sydney office<\/span><span class=\"f_NormalList\">, and with full access permissions (exclude <\/span><span class=\"f_UI\">Server Settings<\/span><span class=\"f_NormalList\">)<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 40px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">b)<\/span><span class=\"f_UI\">Permission set<\/span><span class=\"f_NormalList\"> called <\/span><span class=\"f_Path\">San Diego permission set<\/span><span class=\"f_NormalList\">, with Static Group <\/span><span class=\"f_Path\">San Diego office<\/span><span class=\"f_NormalList\">, and with full access permissions (exclude <\/span><span class=\"f_UI\">Server Settings<\/span><span class=\"f_NormalList\">).<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 59px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">c)<\/span><span class=\"f_UI\">Permission set<\/span> called <span class=\"f_Path\">All Group \/ Dashboard<\/span>, with Static Group <span class=\"f_Path\">All<\/span>, with the following permissions:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Read<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Client Tasks<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Dynamic Group Templates<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Reports and Dashboard<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Policies<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Send Email<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Send SNMP Trap<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Export report to file<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Use<\/span><span class=\"f_NormalList\"> for <\/span><span class=\"f_UI\">Subscriptions<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 58px; margin-left: 0;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Write<\/span> for <span class=\"f_UI\">Notifications<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span><span class=\"f_NormalList\"><a href=\"admin_ar_create_native_user.html\" class=\"topiclink\">Create new user<\/a> <\/span><span class=\"f_Path\">John<\/span><span class=\"f_NormalList\"> with home group <\/span><span class=\"f_Path\">San Diego office,<\/span><span class=\"f_NormalList\"> assigned with the permission sets <\/span><span class=\"f_Path\">San Diego permission set <\/span><span class=\"f_NormalList\">and <\/span><span class=\"f_Path\">All Group \/ Dashboard<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>Create new user <span class=\"f_Path\">Larry<\/span> with home group <span class=\"f_Path\">Sydney office,<\/span> assigned with the permission sets <span class=\"f_Path\">Sydney permission set <\/span>and <span class=\"f_Path\">All Group \/ Dashboard<\/span>.<\/p>\n\r<p class=\"p_Normal\">If permissions are set like this, <span class=\"f_Path\">John<\/span> and <span class=\"f_Path\">Larry<\/span> can use same tasks and policies, reports and dashboard, use dynamic group templates without restrictions; however each can only use templates for machines contained in their home groups.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"sharing_objects\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Sharing objects<\/span><\/h2>\n\r<p class=\"p_Normal\">If an Administrator wants to share objects, such as dynamic group templates, report templates, or policies, the following options are available:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Move those objects into <a href=\"admin_ar_users.html#shared_group\" class=\"topiclink\">shared groups<\/a><\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Create duplicate objects and move them into static groups which are accessible to other users (see the example below)<a id=\"duplication\" class=\"hmanchor\"><\/a><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_example\" >\n\r<tr class=\"Table_example\">\n\r<td class=\"Table_example\" style=\"width:4px; background-color:#77BB1A;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_example\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Example\" title=\"Example\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/example.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_example\"><p class=\"p_Normal\">For an object duplication the user needs to have <span class=\"f_UI\">Read<\/span> permission on the original object and <span class=\"f_UI\">Write<\/span> permission on his <span class=\"f_UI\">Home Group<\/span> for this type of action.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_Path\">Administrator<\/span>, whose home group is <span class=\"f_Path\">All, <\/span>wants to share <span class=\"f_Path\">Special Template<\/span> with user<span class=\"f_Path\"> John<\/span>. The template was originally created by <span class=\"f_Path\">Administrator<\/span>, therefore it is automatically contained in the group <span class=\"f_Path\">All<\/span>. <span class=\"f_Path\">Administrator<\/span> will follow these steps:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span><span class=\"f_NormalList\">Navigate to <\/span><span class=\"f_UI\">More<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">Dynamic Group Templates<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span><span class=\"f_NormalList\">Select the <\/span><span class=\"f_Path\">Special Template<\/span><span class=\"f_NormalList\"> and click <\/span><span class=\"f_UI\">Duplicate<\/span><span class=\"f_NormalList\">, if needed, set name and description and click <\/span><span class=\"f_UI\">Finish<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span><span class=\"f_NormalList\">The duplicated template will be contained in the home group of <\/span><span class=\"f_Path\">Administrator<\/span><span class=\"f_NormalList\">, group <\/span><span class=\"f_Path\">All<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>Navigate to <span class=\"f_UI\">More<\/span> &gt; <span class=\"f_UI\">Dynamic Group Templates<\/span> and select the duplicated template, click <img alt=\"Access Group\" title=\"Access Group\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/move_default.png\"\/><span class=\"f_UI\">Access Group<\/span> &gt; <img alt=\"Move\" title=\"Move\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/move_default.png\"\/> <span class=\"f_UI\">Move<\/span> and select the destination static group (where <span class=\"f_Path\">John<\/span> has permission). Click <span class=\"f_UI\">OK<\/span>.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"shared_group\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">How to share objects among more users via Shared Group<\/span><\/h2>\n\r<p class=\"p_Normal\">To better understand how the new security model works, see the scheme below. There is a situation where there are two users created by the administrator. Each user has his own home group with objects he has created. <span class=\"f_Path\">San Diego permission set <\/span>gives <span class=\"f_Path\">John<\/span> rights to manipulate <span class=\"f_Path\">Objects <\/span>in his home group. The situation is similar for <span class=\"f_Path\">Larry<\/span>. If these users need to share some objects (for example, computers), these objects should be moved to <span class=\"f_Path\">Shared Group<\/span> (a static group). Both users should be assigned with <span class=\"f_Path\">Shared permission set<\/span> which has <span class=\"f_Path\">Shared Group<\/span> listed in the <span class=\"f_UI\">Static Groups<\/span> section.<\/p>\n\r<p class=\"p_Normal\" style=\"text-align: center;\"><img alt=\"Shared objects\" title=\"Shared objects\" width=\"629\" height=\"527\" style=\"margin:0 auto 0 auto;width:629px;height:527px;border:none\" src=\".\/images\/security_model.png\"\/><\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Filters and layout customization<\/span><\/h2>\n\r<p class=\"p_Normal\">You can customize the current Web Console screen view:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"> Add <a href=\"filters_layout_customization.html\" class=\"topiclink\">filters<\/a> and filter presets.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span> You can use <a href=\"tags.html\" class=\"topiclink\">tags<\/a> for filtering the displayed items.<\/p>"
})
