User accounts tab
Use this tab to manage the management access rights to the cluster. These are the cluster management accounts, not the general user accounts defined under Groups.
Account
Displays the configured account name.
Account type
Displays the configured account type.
Add
You can create two type of accounts:
•  user name/password combination for authentication
•  Windows Domain account
To create a new administrator account, click Add. The Host Access Manager User Account window opens.
To add a user name/password user:
1. In the Sign on ID field, type the sign on name for the new account.
2. In the Password field, type the password for the account.
3. In the Confirm password field, retype the password for confirmation.
4. From the Account type drop-down list, select the account type that you want to assign to the account.
5. Click OK.
Notes
•  User names and passwords are case sensitive.
•  You cannot delete the default administrator account (Administrator) but you can change its password.
To add a Windows Domain account:
1. Select the Windows Domain user check box.
2. Click on the ellipsis next to the Sign on ID.
3. Select one user (you cannot add more than one user at a time).
4. From the Account type drop-down list, select the account type that you want to assign to the account.
5. Click OK.
Remove
To remove an account, highlight the desired account and click Remove.
Modify
To modify an account, highlight the desired account and click Modify.
Host Access Manager provides five levels of access permissions:
•  Administrator: Administrators have full read/write permissions on the cluster. This level can be used by a master administrator with full responsibility over the configuration.
•  Day-to-day Admin: Day-to-day administrators have limited permissions. They have no authority on the server or cluster configuration other than changing their password in the cluster properties.
•  Group Admin: Group administrators have limited permissions on a specific group.
•  Manager: Managers have read-only permissions on almost all the configuration items. The only change that a Manager can perform is to reset a user's password using the right-click shortcut menu on the user name. This level can be used by technical support personnel to unlock users who repeatedly enter the wrong passwords more times than permitted, or resetting their passwords when they forget them.
•  Monitor: Monitors have read-only permissions. This permission can be used to monitor the status of the cluster services and connected sessions without taking action.
Administrator permissions details the specific permissions each administrator type is given.
Table 6: Administrator permissions
Permission Access type
Administrator Day-to-day Admin Group Admin Manager Monitor
Cluster properties Y N N N N
Start/stop services Y N N N N
Disconnect user/session: all Y Y N Y N
Disconnect user/session: filtered Y Y Y Y N
Add/remove license keys Y N N N N
Add/remove/modify hosts Y N N N N
Add/remove servers/cluster services Y N N N N
Add/remove/edit groups Y Y Y N N
Add/remove/edit users Y Y Y Limited N
Add/remove/edit sessions Y Y N N N
Assign sessions to groups Y Y N N N
Assign sessions to users Y Y Y N N
Edit keyboard layouts Y Y N N N
Assign keyboards to languages Y Y N N N
Clear cluster database Y N N N N
HTML pages editing wizard Y N N N N
Quick configuration wizard Y N N N N