In the Services Security view Users tab, you can configure the following for a service:
- Add user accounts.
- Change service user passwords.
- Configure user authentication properties and query handling properties for the service.
- Specify the user role membership, which specifies the roles that the user belongs to on the selected service.
|User Role||I want to...||Documentation|
|Administrator||set up a host.|
|Administrator||maintain a host.||Maintaining Hosts|
|maintain a service.|
|Administrator||add user accounts.*||Add, Replicate, or Delete a Service User|
change service user passwords.*
|Change a Service User Password|
|Administrator||configure user authentication properties and query handling properties for the service.*||See "Verify Query and Session Attributes per Role" in the System Security and User Management Guide.|
specify the user role membership (roles that the user belongs to on the selected service).*
See "Add a User and Assign a Role" in the System Security and User Management Guide.
* You can perform these tasks in the current view.
The Users tab has a User List panel on the left. Selecting a username from the panel makes the User Definition panel on the right available.
The User List panel has the following features.
The following figure shows the "Replicate User to other services" dialog.
The following figure shows the Change Password dialog.
The User Definition panel has three sections:
- User Information identifies the user as created in the Admin Services Security view.
- User Settings define parameters that apply to this user's access to the service.
- Role Membership defines user roles to which the user belongs.
There are two buttons at the bottom of the panel:
- The Apply button saves the changes made in the User Definition panel, and they become effective immediately.
- If you have not saved changes in the User Definition panel, the Reset button resets all fields and settings to their values before editing.
The User Information section has the following features.
|Name||The name of the user.|
|Username||The username that this user enters to log in to the service. This is the NetWitness Platform username generated when the administrator added the user and the associated credentials in the Admin Services Security view.|
|Password (and Confirm Password)||The password that the user enters to log on to the service. This is the NetWitness Platform password generated when the administrator added the user and the associated credentials in the Administration Security view. The NetWitness Platform account password and the service password must match in order to allow the user to connect to the service through NetWitness Platform.|
|(Optional) The user's email address.|
|Description||(Optional) A general description field to describe this user.|
The User Settings section has the following features.
|Auth Type||The authentication scheme for this user. The product line supports internal and external authentication. |
|Core Query Timeout||Specifies the maximum number of minutes a user can run a query on the service. If this value is set to 0, the query timeout is not enforced for the user on the service.|
|Query Prefix||(Optional) Restricts query results seen by the user by appending the query syntax to every query. For example, adding the query prefix email != 'firstname.lastname@example.org' prevents those email results from showing up in the sessions.|
|Session Threshold|| |
(Optional) Controls the behavior of the application when scanning meta values to determine session counts. If any meta value has a session count that is above the set threshold, the determination of the true session count stops when the threshold is reached.
If a threshold is set for a session, the Navigate view (INVESTIGATE > Navigate) shows that the threshold was reached and the percentage of query time used to reach the threshold.
The Role Membership section shows a list of all roles. The checkbox next to a role is selected for the roles that a user is a member of for the selected service.