
Managing Security Settings 149
18
Managing Security Settings
Using Security Roles and Permissions
OpenManage Essentials provides security through role-based access control
(RBAC), authentication, and encryption. RBAC manages security by
determining the operations run by persons in particular roles. Each user is
assigned one or more roles, and each role is assigned one or more user
privileges that are permitted to users in that role. With RBAC, security
administration corresponds closely to an organization's structure.
OpenManage Essentials roles and associated permissions are as follows:
• OpenManage Essentials Guests is a default role assigned to all users at
initial log in. No permissions are associated with this role, and it is not
displayed in the Windows user groups list. It enables administrators to
monitor unauthorized users attempting to access the console.
• OpenManage Essentials Users have read only access and cannot perform
other operations. They can log in to the console, run discovery and
inventory tasks, view settings, and acknowledge events. The Windows
Users group is a member of this group.
• OpenManage Essentials Administrators have full access to all the
operations within OpenManage Essentials. Windows Administrators
group is member of this group.
Microsoft Windows Authentication
For supported Windows operating systems, OpenManage Essentials
authentication is based on the operating system's user authentication system
using Windows NT LAN Manager (NTLM) modules to authenticate. For the
network, this underlying authentication system allows you to incorporate
OpenManage Essentials security in an overall security scheme.
banderaUG.book Page 149 Friday, May 11, 2012 2:40 PM
Commentaires sur ces manuels