Administrator Properties dialog box - General tab

Use this dialog box to change the properties of an Administrator element.

Option	Definition
General tab
Type	Specifies where the administrator account is stored. Local — The administrator account is stored locally.
User	(When Type is Linked to LDAP) Specifies the user account on the integrated external directory server to which the administrator account is linked. Click Select to select an element.
User Domain (Not editable)	(When Type is Linked to LDAP) Shows the LDAP domain to which the user account on the integrated external directory server belongs.
Group (Optional)	(When Type is Linked to LDAP) Specifies the user group in the integrated external directory server to which the user account must belong for SMCaaS access to be allowed. Click Select to select an element.
Name	Specifies the user name that the administrator uses to log on to the SMCaaS Application.
Comment (Optional)	A comment for your own reference.
Authentication	Select the authentication method to use to authenticate administrator: User Password — When selected, authentication is done by the SMCaaS using a user name and password. RADIUS — When selected, RADIUS authentication is done by an external authentication server. TACACS+ — When selected, TACACS+ authentication is done by an external authentication server. LDAP — When selected, authentication is done using simple password authentication against integrated external LDAP databases. This option is only available when Linked to LDAP is selected. Client Certificate — When selected, authentication is done by the SMCaaS using an X.509 certificate presented by the administrator. SAML — When selected, authentication is done by using an Identity Provider. OpenID — When selected, authentication is done by using an OpenID Provider.
Password	Specifies the password. The manual password you enter is required to meet the following conditions: Minimum 10 characters. At least one upper and one lower case letter. At least one digit.
Generate Password	Generates a random temporary password according to the settings in the password policy. Generated passwords are one-time passwords. The administrator is prompted to enter a new password at the first logon.
Confirm Password	Confirms the password.
Require Administrator to Change Password at First Logon	When selected, the administrator must enter a new password at the first logon.
Always Active	When selected, the user account is active immediately and is never automatically disabled.
Expiration Date	Specifies the date when the user account is automatically disabled.
Authentication Method	(When Authentication is RADIUS or TACACS+) Specifies the authentication method provided by an external authentication server.
Client Identity Type	(When Authentication is Client Certificate) Specifies the attribute in the certificate that is used to identify the administrator. Distinguished Name — The distinguished name (DN) attribute identifies the administrator. Common Name — The common name (CN) attribute identifies the administrator. User Principal Name — The user principal name (UPN) that is mapped to the certificate identifies the administrator. Email — The email address identifies the administrator. SHA-256 — The SHA-256 hash of the certificate identifies the administrator. SHA-512 — The SHA-512 hash of the certificate identifies the administrator.
Fetch From Certificate (Optional)	(When Authentication is Client Certificate) Gets the value of the selected attribute from a certificate that you import. Opens the Import Certificate dialog box.
Identity Value	(When Authentication is Client Certificate) Specifies the value of the selected attribute.

Option	Definition
Permissions tab
Unrestricted Permissions	When selected, the administrator can manage all elements and perform all actions without any restrictions.
SMC Appliance Superuser (SMC Appliance only)	When selected, the administrator can log on to the SMC Appliance command line. Administrators with unrestricted permissions (superusers) are allowed to log on to the SMC Appliance command line only if there are no administrators with SMC Appliance Superuser permissions.
Restricted Permissions	When selected, the administrator has a limited set of rights that apply only to the elements granted to the administrator.
Role (Restricted Permissions only)	Shows the role or roles assigned to the selected administrator: Operator, Editor, Owner, or Viewer. Click the cell to select the role from the drop-down list.
Granted Elements (Restricted Permissions only)	Shows the elements that an administrator has been given permission to edit and install when the selected administrator role would otherwise prevent them from doing so. Double-click the cell to open the Select Element dialog box.
Domains (Restricted Permissions only)	If Domains have been configured, shows the Domains in which the rights granted by the administrator role and the selected elements apply. Click the cell to select the Domain from the drop-down list. You can leave the default Shared Domain selected in the Domains cell. All elements automatically belong to the predefined Shared Domain if Domain elements have not been configured. You can also select the ALL Domains Access Control List to grant permissions for all Domains that have been defined.
Add Role (Restricted Permissions only)	Adds a row to the table.
Remove Role (Restricted Permissions only)	Removes the selected role from the selected administrator.
Allow Administrators to Log On to the Shared Domain (Multiple Domains only)	When selected, allows the administrator to log on to the Shared Domain. Otherwise, the administrator is only allowed to log on to the specified Domains.
Log Filters (Restricted Permissions only)
Filter	You can select filters that are applied before logs from the granted elements are shown to the administrator. Click Select to select a filter.