3Com 10031370-01 - Manual

1 I NTRODUCING S ECURITY This chapter explains how security works and what functions it performs. It also provides reference information on pre-defined user groups , all permissions and permission definitions . Introduction The organization of this guide follows the concepts and steps required to se...

1-2 C HAPTER 1: I NTRODUCING S ECURITY A complete description of all possible permissions appears in the “Security Objects and Permissions” section later in this chapter. A permission can be: ■ Granted—you can do the action ■ Denied—you cannot do the action ■ Inherited—you can or cannot do the actio...

Security Glossary 1-3 case, simply remove permission from the Sales User group to deny them access to monitoring feature of fax port 2. All other user groups, except those belonging to the sub-group Sales User , can still monitor the modem. This illustrates that user groups with similar permissions ...

1-4 C HAPTER 1: I NTRODUCING S ECURITY set up here. There are two states of an Account # in reference to a user. The Account # is either Active or Forwarded. Table 1-1 Icon List—Object Icons Table 1-2 Icon List—Permission Icons Adding Members to Pre-Defined User Groups There are six pre-defined user...

Security Glossary 1-5 If you are satisfied with the pre-defined User groups and their permissions, you may not need to use this security module at all (except to add new users). For more information on the permissions for pre-defined groups, see the following section, “Pre-Defined User Groups”. Pre-...

1-6 C HAPTER 1: I NTRODUCING S ECURITY Server supervisors cannot create fax jobs unless they also belong the Fax Users group. Account Supervisors Account supervisors are created to provide added security for individuals who need it. Defined properties of accounts might prevent server supervisors (wh...

Security Glossary 1-7 CommWorks IP Fax Users Members of this group have irrevocable permissions to create fax jobs. You must belong to this group to create fax jobs. Assistants Members of this group can do the same actions to fax jobs as the person they assist. Default Object Permissions This sectio...

1-8 C HAPTER 1: I NTRODUCING S ECURITY ■ User Profile Owned by 'Self' This group allows the creator of an object additional permissions for it. You can change these permissions as needed. For more information on the default permissions users have for objects Owned By Self, see the previous section. ...

Security Glossary 1-9 List Cover Page—See that the cover page exists in the list of cover pages using the Fax Send dialog. Other Cover Page Permissions are only useful when you have the List Permission. Use Cover Page—Send the Cover Page with outbound faxes from the Fax Send dialog. View Cover Page—...

2 W ORKING W ITH S ECURITY This chapter explains how to use the security module to create groups and edit permissions. Starting Security The example below will use the Server Administrator button menu to work with security features. Access is also available from the fax client screen. To start the S...

2-2 C HAPTER 2: W ORKING W ITH S ECURITY Sorting Security Information The Security Setup screen has a command bar at the top. This section will address some of the commands found in this area. The table below describes commands under the Change item: Table 2-1 Change Commands The table below describ...

Starting Security 2-3 Setting Up Accounts In a new installation, two default accounts are created automatically: the account names are reserved, and are displayed as “Account #1” and “System Account”. These accounts cannot be deleted. To view the list of accounts, click the plus sign (+) to expand t...

2-4 C HAPTER 2: W ORKING W ITH S ECURITY 3 Enter the user’s name in the field and click Add . The User Properties screen appears: Figure 2-4 User Properties Fields for this screen are described below: Table 2-4 User Properties Fields Field Name Description Settings User IDUser Name User name appears...

2-6 C HAPTER 2: W ORKING W ITH S ECURITY Setting Up Groups After manually creating users, creating groups provides structure to the security configuration. For example, a separate group may be created for each department so that the use of attachments, phonebooks or port devices is restricted. Setti...

Starting Security 2-7 5 The Add Members screen opens in a window to the left of the main screen. Select users one-at-a-time or all at once. Click Add Member! and the names appear in the expanded groupname folder. Figure 2-7 Members Added If you select an inappropriate group type is selected, Securit...

2-8 C HAPTER 2: W ORKING W ITH S ECURITY Deleting a User-defined Group 1 In Security Setup , select the group you want to remove. 2 From the Change menu, click Delete Group . 3 The group is removed from the list. Sub-Groups Users and objects can belong to more than one group. To view all groups to w...

Starting Security 2-9 5 On the command bar, click Permissions . The Permissions window appears: Figure 2-9 Object Permissions by User Group 6 This screen shows that all inherited permissions have been transferred to all users in this group. Change one or two permissions to perform the next step. Fig...

2-10 C HAPTER 2: W ORKING W ITH S ECURITY Dominant Permission When a user belongs to more than one group with different permissions, or is individually defined for specific objects, which permission is used? Rule 1. Individual’s permissions overrule the permissions for a group . An individual permis...

Starting Security 2-11 1. Change the permission in this screen. An explicit permission will override a group-inherited permission. 2. Make a specific group for Sales Attachments. These public attachments are accessible by all sales persons. Gallagan has permission to delete in this object group: Fig...

3 S ECURITY P ERMISSION E XAMPLES This chapter shows two example procedures. These samples build on concepts discussed earlier in this guide. Sample Sales Permissions This sample uses a group of users called SrSales and a group of attachments called SalesAttachments . This sample explains how to cha...

3-2 C HAPTER 3: S ECURITY P ERMISSION E XAMPLES d Click SalesAttachments to expand the folder. Click Permissions! Figure 3-2 Default Permissions e The default permissions for Sales Attachments shows that no permissions are granted. 2 Grant the Developers group permission to use the attachments in th...

Sample Sales Permissions 3-3 d Click Permissions! to see that these attachments cannot be used by this group. Figure 3-4 Development Permissions e Open the SrSales group. f Open the All Attachments folder and click on SalesAttachments . Figure 3-5 SrSales Permissions g Click Permissions! to see that...

3-4 C HAPTER 3: S ECURITY P ERMISSION E XAMPLES To Change Individual Permissions 1 In the Sorted by Users window, select a user that does not belong to either the SrSales group or the Server Supervisors pre-defined group. Double-click the user to display the objects. Check the groups to which a user...

7 Click Change Permissions! to allow this user use of the SalesAttachments . Figure 3-7 SalesAttachment Permissions Changed

1 I NDEX A Account # definition 1-3 Account #1 2-3 Account Status user properties 2-5 Accounts 1-2 creating 2-3 overview 1-2 Add New User 2-2, 2-3 Add To Folder definition 1-9 Add to Phonebook definition 1-10 Adding Users to pre-defined Groups 1-4 Adding Members to Pre-Defined User Groups 1-4 All 'O...