The information on this page refers to License Statistics v6.22 and newer, which introduced using account "roles" to control permissible/forbidden license servers and reports, and separated the ability to hide/show license servers and reports to settings that are applied to individual user accounts. If you are using a version previous to v6.22, see documentation for previous versions. |
License Statistics Administrators can create and edit user accounts using the Accounts page, found under the Administration section in the navigation menu.
From the Accounts page, you can:
- Manually create user accounts
- Edit account and role settings
- Create custom roles that control user account permissions
- Edit accounts and roles
- Delete user accounts and roles
- Enable/disable authentication
You can also create user accounts automatically using LDAP, as described in Connecting to an LDAP server.
About permission and visibility settings
Permission settings provide security against unauthorized access to license servers and/or reports by individual user accounts. Permissions for user accounts are controlled using roles. The permissible license servers and reports that each user account is allowed to access are defined by the role that is assigned to the user. Individual users cannot alter their permission settings.
The visibility of permissible license servers and individual features may also optionally be set by a License Statistics administrator when creating or editing individual user accounts. In addition, any License Statistics user can change the visibility settings for license servers and features at any time, allowing individual users to view only the data that is relevant for their needs in License Statistics reports.
Creating a new account
To add a License Statistics user account:
- In the Accounts page, click the Create button below the Accounts table.
The Create Account wizard displays, with the General tab open.Initially, you must proceed through the tabs by using the Next button after filling in the required information in the tab. As you proceed through each tab of the dialog, you will be able to directly open the tabs and change settings as needed.
- In the General tab, complete the settings as appropriate for the account you are adding:
- The Display Name (usually, the first and last name of the user) that will be shown in License Statistics.
- The Name (username) that will be used to log in to License Statistics.
- Optionally, an email address for the account.
- The role to be assigned to the account, which controls the user's permission settings. The account will have access only to the permitted servers and reports according to the assigned role; access to all other license servers and reports will be forbidden. See Assigning and adding roles for more information about roles.
- If you have enabled LDAP, you can check the "Authenticate using LDAP" option to authenticate the username using LDAP instead of a password. Also see the notes below regarding LDAP.
- If you are not using LDAP authentication, enter the password for the account, and then re-enter the password to confirm it. (If you toggle on LDAP authentication as described in the previous step, the password fields will be grayed out.)
- Click Next (which is available only after you have completed all required fields) to continue to the License Server Visibility tab.
This tab lets you optionally customize which license servers (permissible license servers are based on the role that was selected for the account) will be shown in License Statistics reports for the account. For example, you may anticipate that a certain license server is unlikely to be monitored by a particular account, and thus will not need to be seen in reports, but you may not want to forbid the account from accessing that license server. Account users can change the visibility settings for their permissible license servers at any time, as described in Visibility settings. - To customize license server visibility for the account, select the license server(s) you want to move between the "Visible" and "Hidden" lists, and then click the Hide/Show button as needed.
- Click Next to continue to the Feature Visibility tab.
This tab lets you optionally customize which features will be shown in the License Statistics reports that are permissible for the role assigned to the account. For example, you may anticipate that a certain feature is unlikely to be monitored by a particular account, and thus will not need to be seen in reports. Account users can change their visibility settings for features at any time, as described in Visibility settings. - Select a license server from the Select License Server drop-down at the top of the page to see the visible and hidden features for that license server. The list of license servers is limited to the permissible license servers for the account (based on the role that was selected for the account).
- To customize feature visibility for the account, select the feature(s) you want to move between the "Visible" and "Hidden" lists, and then click the Hide/Show buttons as needed.
- Repeat steps 6 and 7 as needed to set the feature visibility for the license servers that are permissible for the account.
- Click Save to create the account.
Notes on using LDAP authentication
- LDAP must be enabled to use the "Authenticate using LDAP" toggle on the Accounts page. If LDAP is disabled, the "Authenticate using LDAP" option will be disabled on the Accounts page.
- If the "Authenticate using LDAP" option is disabled, the credentials will be taken from the License Statistics database, or you may enter the account password in the Account form, as described above.
- If you toggle on the "Authenticate using LDAP" option to authenticate the username using LDAP, and then subsequently disable LDAP, the account logins will fail.
- The administrator login that is initially created by License Statistics (username: admin) cannot use LDAP authentication.
Assigning and adding roles
License Statistics user permissions are controlled by the role that is assigned to the account. There are two default roles, described in the table below. These default roles cannot be deleted, and the role name cannot be changed.
Default role | Permission settings and usage | Permission settings editable? |
---|---|---|
Administrator | Allows full permissions, including the ability to create new accounts, edit license server information, and remove license servers from the list of monitored servers. | No |
User | Allows viewing usage information, but does not include any administrative or editing privileges. | Yes |
In addition to these default roles, you can add any number of custom roles that define the allowable license servers and reports that are accessible to users who are assigned that role. The settings for custom roles are initially based on the default "User" role.
To add a custom user role:
- In the Accounts page, click the Create button below the Roles table.
The Create Role wizard displays, with the General tab open.Initially, you must proceed through the tabs by using the Next button after filling in the required information in the tab. As you proceed through each tab of the dialog, you will be able to directly open the tabs and change settings as needed.
- In the General tab, complete the settings as appropriate for the role you are adding:
- The role name, which will be used to identify the role when adding/editing accounts.
- Optionally, a description for the role.
- If desired, enable the "Allow New License Servers" toggle to automatically allow new license servers that are added to License Statistics to be added to the role's permitted license servers.
- Click Next (which is available only after you have completed all required fields) to continue to the License Server Permissions tab, which lists the permissible license servers for the role.
- Specify the license servers that are permissible for the role by selecting the license server(s) you want to move between the "Allowed License Servers" and "Forbidden License Servers" lists, and then clicking the Forbid/Allow buttons as needed.
- Click Next to continue to the Report Permissions tab.
- Click Save to create the account.
As of License Statistics v6.22:
- Permission settings are applied to entire license servers. Therefore, you can restrict the visibility of individual features, but cannot restrict the permissions for individual features.
- If any of the servers in a license server group are forbidden, the entire license server group is forbidden.
Editing an account or role
You can edit any account except the Administrator account. Any changes to role permissions will be applied instantly, and will be seen in License Statistics menus and grids after the next page/grid refresh.
To edit settings for an account or role:
- Click the Edit icon in the Action column for that account/role.
The Edit Account/Edit Role dialog opens. This dialog has the same tabs and content as the one used to create the account/role, with non-editable fields grayed out. - Edit the settings for the account/role as needed, in the same manner as for creating the account/role (see above).
- Click Save or Save and Close to accept the changes.
Deleting an account or role
You can delete user accounts or roles at any time. However, a role can be removed only when it is unused (not currently assigned to any user accounts).
To delete an account/role:
- Click the Delete icon in the Actions column for the account/role to be removed.
- Confirm the deletion of the account/role in the dialog that pops up.
Enabling/disabling authentication
Authentication is enabled by default and may be toggled on and off using the "Enable authentication" checkbox in the Authentication Settings area at the top of the Accounts page.
When authentication is enabled, accounts must log in to access License Statistics. If authentication is disabled, everybody can access License Statistics without logging in. You might decide to turn off authentication if, for example, you provide your own method of security by allowing access to License Statistics only through your intranet.
If authentication is currently disabled, after toggling authentication on, you will be returned to the Login page, where you must log in using a valid username/password in order to access License Statistics.
Use the "Session length" slider to set the number of days that the session will last after the account logs in. The session length defaults to 1 day and has a maximum of 365 days.
The session length you set is saved automatically.