User panel: User access and permissions
Contents
Introduction
The user panel allows to manage users by setting up READ and WRITE rights for different permissions in the system. The system allows to setting of 3-tier access permissions, e.g. guest, operator, admin.
Default login and password
By default, the device has a "guest" account with the most extensive access rights ( all rights for view/write):
username: guest
login: guest
To change the user go to the "Main menu" >> "Users".
Administrator account, username, and password
To improve security it is needed to create a new user account with the highest access rights ( all rights for view/write), and to reduce the access rights of the "guest" account or completely remove it from the user accounts.
There is no direct limit on the number of users.
To manage the user accounts go to "Main menu" >> "Users".
To create a new user account press the "add" button:
To edit an existing user account, select it from the list of accounts, and a modal window with options will pop up.
Select user rights in the window that appears and after that click "Save".
To delete an existing user account, select it from the list of accounts and click "Delete".
Fields "E-Mail" and "Phone" are designed to indicate contacts of a user (only one e-mail address and only one phone number). You can easily add a user by name (name string without spaces) to the mailing or SMS lists, if the user has the appropriate type of contact, the notification message will be sent to him.
User access permissions
To limit user access to the subsystems of the device the following groups of access permission are used:
To prevent the user from seeing other user accounts, it is necessary to uncheck the box ("Users")!
Access permissions | Description | Reading | Writing |
---|---|---|---|
full access | Admin rights | full access for reading including downloading log data | full admin access includes uploading new firmware, downloading system settings, setup Radius, backup and upgrade settings, analog sensors power, setup LTE and VPN connection |
electronic keys | Management of iButton access keys and RFID cards | read keys and download keys database | add new keys, delete keys, upload keys database |
cameras | Control of video cameras | view camera stream, elements are read on a general permissions | add new IP cameras, delete IP cameras, elements are written on a general permissions |
CAN bus | CAN bus control | read CAN bus configuration | delete CAN devices, run and save CAN bus configuration |
virtual elements | Virtual elements management (a timer, ping, trigger, Modbus, math, dewpoint, SNMP get) | read Modbus configuration, elements are read on a general permissions | add and delete virtual elements, set Modbus configuration, elements are written on a general permissions |
elements | General element management | reading of elements is always available | modify elements, reset element charts data, save to flash |
groups | Group management | reading of groups is always available | add and delete groups, disable group notifications |
GSM modem | GSM modem control | get modem configuration and status | send SMS (forced by user), set modem configuration, send USSD request, clear SMS list |
system log | System log management | View log messages | manage FTP, e-mail, and sensors dump configuration, clear log messages |
logic schemes | Logic control | view logics schemes | add new, delete, disable, turn on, and off the logic schemes |
modules | General modules management | reading of modules is always available | set up module properties (not used now) |
notification | Notification management (mail, trap, SMS, dial, web messages, push) | notification elements are read on a general permissions | add new, modify, delete, and test sending notifications |
outlets and relays | Relay control | not used now | not used now |
media | SD card, USB flash, and SATA HDD management | read media configuration and status | set media configuration |
runtime environment | Runtime management, system control | View network, SNMP, GPS settings, and time configuration | reboot unit, restore settings, upload certificates, set network, DynDNS, SNMP, GPS settings, and time configuration |
users | User account management | read the user list (no passwords) | add new, modify, and delete the user account |
map | Map management | View map, elements are accessed on a general permissions | upload map picture, configure map view, add sensors to map |
Settings recovery
The appliance can save settings to a backup file and restore it later. To save a file with the system settings, follow these steps: in the appliance, interface go to "Main menu" >> "System menu" >> "Export" >> "Download current settings". The file will be saved using the name "settings.vut".
To restore, change, or clone settings, copy the file "settings.vut" to the root of a USB flash drive, without changing the file name. Plug the USB flash drive into the appliance socket "USB" and wait. The update process is displayed on the front panel with flashing LED "ERR". If successful, the "ERR" LED will go off, and the "ACT" LED will blink for a while with increased frequency. If unsuccessful "ERR" LED will remain lit. Remove the USB flash drive and reboot the system. Test the appliance.
Password recovery
Sometimes, in case of loss of all the data on the appliance or, if you have equipment with unknown settings, it may maybe necessary to restore the password identifier and change it to "guest".
Use the file "reset users.vut", and copy this file to the root of a USB flash drive, without changing the file name. The file can be downloaded in the “tools.zip” in the firmware drivers section of your system.
Plug the USB flash drive into the appliance socket "USB" and wait. The update process is displayed on the front panel with flashing LED "ERR".
If successful, the "ERR" LED will go off, and the "ACT" LED will blink for a while with increased frequency.
If unsuccessful "ERR" LED will remain lit. Remove the USB flash drive and reboot the system. Test the appliance.