User Guide: AWC plug-in version 3.10.0 for VST-APL

# Create Account

Now that we have a Management Group for the network we chose, let's create an account to manage APs in the group.
Vista Manager EX and the AWC Plug-in share a single account information database.
Here we are going to create a user for managing "1-2F network".

> Note

> > You do not have to create an additional account if you plan to use the default Admin account to manage all APs.

1. Select "User Management" from the Vista Manager EX main menu.
2. Click "Create" at the top right of the screen.
   The "New User" screen will appear.
3. Enter a username, a full name and an email address.
   Here we enter the following data:

   Table 1: Account Configuration 1
   Item Name | Value | Description
   --- | --- | ---
   Username | 1-2f_manager | An account ID for the user, which is used to log in. Note The username cannot be changed once created. Note The username is not reusable and should be unique through the whole lifetime of an Vista Manager EX / AWC Plug-in system. That means once an account has been created with a username, the username cannot be used for another account, even if you delete the original account. Please carefully consider the account policy etc. before creating one.
   Full Name | 1-2F Manager | A display name for the user, such as their full name. The full name should be less than or equal to 100 characters in length.
   Email | 1-2f_manager@example.com | The email address to be used for password recovery and license expiry notification. Please specify a valid email address. Note If an obsolete account is deleted, the email address associated with it at the time of deletion is not reusable. If you are going to delete an account, and if it is possible for the email address owner to have another account in the future, we recommend you change the email address of the obsolete account to a dummy address before deleting the account.

4. Enter a password.
   Then enter the same password again for confirmation.

   Table 2: Account Configuration 2
   Item Name | Value | Description
   --- | --- | ---
   Password | t0psecret! | Password for the user. The password should be at least 8 characters, with alphabets (case-sensitive), numbers, and symbols (! @ # $ % ^ & * ( ) may be used). It must also contain at least one number, one alphabet, and one symbols each.
   Confirm Password | Enter the same password again for confirmation.

5. Select an account type.
   Here we select "User" because we want to allow the user to configure AMF Area "area1" only.

   Table 3: Account Configuration 3
   Item Name | Value | Description
   --- | --- | ---
   Account Type | User | Select the type of account. Admin Can use all functions of Vista Manager EX, including user and system settings. User Can only change or check the status and settings of Vista Manager EX Management Groups (AMF areas, AWC Plug-in's management group, and SNMP Plug-in's subnet) to which permissions are given separately.

6. If the account type is "User", select the user's permissions for Vista Manager EX Service Monitoring and the user's network access permissions for various "AVMEX Management Groups" (AMF areas, the AWC Plug-in's management group and the SNMP Plug-in's subnet).

   Table 4: Account Configuration 4
   Item Name | Value | Description
   --- | --- | ---
   Permissions | Read Only | Select the user's permissions for Vista Manager EX Service Monitoring. Read Only This user can only view Service Monitoring. Read/Write The Admin can view, create, edit, and delete Service Monitors. This option is not displayed when the Account Type is set to "Admin". The Admin can view, create, edit, and delete Service Monitors.
   SSH Permissions | Off | If the Account Type is "User", the option for the permission of SSH connection to the AMF devices in authorized AMF areas is displayed. This option is not displayed when the Account Type is set to "Admin". Admins can connect to all the AMF devices via SSH.
   Management Group Permissions | 1-2F Group - Read/Write Other Management Groups - No Permission | If you specify "User" as the Account Type, select the user's access permission for each Vista Manager EX management group. The default is "No Permission". Management groups in Vista Manager EX are defined as: "AMF Area" in the AMF Network "Management Group" of the AWC Plug-in "Subnet" of the SNMP Plug-in Management groups are listed in alphabetical order, regardless of their types. You can choose one from the following permission levels for each area: No Permission No information about the Vista Manager EX management group is shown for the user. Note When a user logs in who has "No Permission" set for an Vista Manager EX management group, Vista Manager EX's "My Account" page displays the management group name and that the user has "No Permission" on the management group. In multi-tenant usage, to prevent a user from knowing another user's area, we recommend you avoid giving the management groups names that are too relevant or identifiable, such as company names. Read Only Users at this level can view the management group's status. The user can view topology maps of management groups and devices, device information, comments for devices and events, and logs of Abnormal and Normal events. For plug-in areas, the user can only view device information in the management group. Read/Write The user can view the management group's status and can perform certain operations on the management group. Operations include performing AMF device backup, SSH to Device, editing notes for devices and events, and changing backup configuration on the AMF controller and masters. For plug-in areas, the user can only view and configure device information in the management group. This option is not displayed when the Account Type is set to "Admin". The Admin can view and configure all Vista Manager EX management groups (AMF Areas, the AWC Plug-in's management groups, and the SNMP Plug-in's subnets).

7. If you specify "User" as the Account Type, select the Management Groups to which the user belongs.
   Management Groups created by an Admin are listed here. In this example, the "1-2F Group" that was created in Create Management Group is listed.

   Table 5: Account Configuration 5
   Item Name | Value | Description
   --- | --- | ---
   AWC Management Group | 1-2F Group - checked | When the AWC Plug-in is registered to Vista Manager EX, this field indicates the permissions for using management groups for the account whose account type is set to "User". When Ticked: The user will be able to perform the following operations on the selected management group: View management group settings (Management Group name, Network name, Area name) View, add, edit, and delete APs belonging to the management group View, add, edit, and delete floor maps belonging to the management group View, add, edit, and delete various profiles When not Ticked: The floor maps, profiles, and APs which belong to the management group will not be displayed when a user logs in with this account. Note that the "My Account" screen, which is displayed from the user ID in the administration column, shows the names of all management groups registered to the AWC Plug-in, regardless of whether they have been permitted for management or not. The management group must be created in advance with an "Admin" account type. Note It is not possible to allow a "User" account to only view floor maps, profiles, and APs under management that belong to a management group while prohibiting changes to the management group. Note This option is not displayed when the Account Type is set to "Admin". You can edit all management groups and manage the floor maps, associated APs, and profiles they belong to.

8. When the account type is "User", you can set the user read/write permissions for each site and group in Vista Manager EX.
   Creating site or group structures do not affect the management by the AWC Plug-in, so we will ignore it for now.
9. Confirm and adjust display refresh rates for the AWC Plug-in.

   Table 6: Account Configuration 6
   Item Name | Value | Description
   --- | --- | ---
   Refresh Rates | (default) | Specifies the automatic display refresh intervals (in seconds) for the AWC Plug-in. AP Status (Default: 60 secs) Floor MAP (Wireless Status) (Default: 60 secs) Floor Map Details(Wireless Clients) (Default: 5 sec) Floor Map Details (Smart Connect) (Default: 5 sec)

10. Select a default Country Code for the AP profiles.

    Table 7: Account Configuration 7
    Item Name | Value | Description
    --- | --- | ---
    Country Code | NZ - New Zealand | Specify the default Country Code for AP Profiles in the AWC Plug-in. This is used to properly configure APs for radio frequency regulation in the country. The default is None.

11. Select the Language for the web interface and configure the session Timeout.

    Table 8: Account Configuration 8
    Item Name | Value | Description
    --- | --- | ---
    Language | English | Select the language used on the management web interface. You can select from Auto Detect (Default), English, and Japanese. When set to "Auto Detect", the language is selected according to the web browser's language preference.
    Timeout | 10 minutes | Specify the web interface's session timeout. A login session times out and the login page reappears after the configured number of minutes of inactivity. Available options are 5 min, 10 min, 20 min, 30 min, 1 hour, and Never. If you set Timeout to Never, a login session never times out and automatic logout is disabled. Timeout is set to 5 minutes by default.

12. Set the email notifications about Event and Syslog rules, and the network topology layout.
    Since this account is for the AWC Plug-in operation only, these settings can be omitted.

    Table 9: Account Configuration 9
    Item Name | Value | Description
    --- | --- | ---
    Receive Event and Syslog Rule email notifications | Disable | Specify whether to receive email notifications to the relevant account when email notification is configured in an Event Rule or Syslog Rule.
    Network Topology Layout | (blank) | Select the layouts you want to apply to the network map at first login or allow to be applied thereafter.

13. Click "Save".
    You can see the created user "1-2F Manager" was added to the list.

04 Jul 2023 13:01