User Guide: AWC plug-in version 3.11.0 for VST-APL

# Create Account

Now that we have a Management Group for the network we chose, let's create an account to manage APs in the group.
Vista Manager EX and the AWC Plug-in share a single account information database.
Here we are going to create a user for managing "1-2F network".

> Note

> > You do not have to create an additional account if you plan to use the default Admin account to manage all APs.

1. Select "User Management" from the Vista Manager EX main menu.
2. Click "Create" at the top right of the screen.
   The "New User" screen will appear.
3. Enter a username, a full name and an email address.
   Here we enter the following data:

   Table 1: Account Configuration 1
   Item Name | Value | Description
   --- | --- | ---
   Username | 1-2f_manager | An account ID for the user, which is used to log in. Note The username cannot be changed once created. Note The username is not reusable and should be unique through the whole lifetime of an Vista Manager EX / AWC Plug-in system. That means once an account has been created with a username, the username cannot be used for another account, even if you delete the original account. Please carefully consider the account policy etc. before creating one.
   Full Name | 1-2F Manager | A display name for the user, such as their full name. The full name should be less than or equal to 100 characters in length.
   Email | 1-2f_manager@example.com | The email address to be used for password recovery and license expiry notification. Please specify a valid email address. Note If an obsolete account is deleted, the email address associated with it at the time of deletion is not reusable. If you are going to delete an account, and if it is possible for the email address owner to have another account in the future, we recommend you change the email address of the obsolete account to a dummy address before deleting the account.

4. Enter a password.
   Then enter the same password again for confirmation.

   Table 2: Account Configuration 2
   Item Name | Value | Description
   --- | --- | ---
   Password | t0psecret! | Password for the user. The password should be at least 8 characters, with alphabets (case-sensitive), numbers, and symbols (! @ # $ % ^ & * ( ) may be used). It must also contain at least one number, one alphabet, and one symbols each.
   Confirm Password | Enter the same password again for confirmation.

5. Select an account type.
   Here we select "User" because we want to allow the user to access limited management groups only.

   Table 3: Account Configuration 3
   Item Name | Value | Description
   --- | --- | ---
   Account Type | User | Select the type of account. Admin Can use all functions of Vista Manager EX, including user and system settings. User Can only change or check the status and settings of Vista Manager EX Management Groups (AMF areas, AWC Plug-in's management group, and SNMP Plug-in's subnet) to which permissions are given separately.

6. If you specify "User" as the Account Type, set the Permissions for the various functions that the relevant user is allowed to operate.
   When the AWC Plug-in is registered, also configure access permissions for AWC Plug-in's management groups.
   Management Groups created by an Admin are listed here. In this example, the "1-2F Group" that was created in Create Management Group is listed.

   Table 4: Account Configuration 4
   Item Name | Value | Description
   --- | --- | ---
   SSH Permissions | Off | If the Account Type is "User", the option for the permission of SSH connection to the AMF devices is displayed. The default is "Off". On SSH connections can be made to AMF devices in AMF areas with management group permissions set to "Read/Write". Note Permission controls on Vista Manager EX do not apply to operations on the SSH. In other words, if the SSH Permission is On, the user of the account can still make separate configuration changes in the CLI via the SSH connection to all AMF devices on the AMF network. Off SSH connections are not possible for AMF devices even if the management groups they belong to are set to "Read/Write". This option is not displayed when the Account Type is set to "Admin". Admins can connect to all the AMF devices via SSH.
   AWC Management Group | 1-2F Group - checked | When the AWC Plug-in is registered to Vista Manager EX, this field indicates the permissions for using management groups for the account whose account type is set to "User". When Ticked: The user will be able to perform the following operations on the selected management group: View management group settings (Management Group name, Network name, Area name) View, add, edit, and delete APs belonging to the management group View, add, edit, and delete floor maps belonging to the management group View, add, edit, and delete various profiles When not Ticked: The floor maps, profiles, and APs which belong to the management group will not be displayed when a user logs in with this account. Note that the "My Account" screen, which is displayed from the user ID in the administration column, shows the names of all management groups registered to the AWC Plug-in, regardless of whether they have been permitted for management or not. The management group must be created in advance with an "Admin" account type. Note It is not possible to allow a "User" account to only view floor maps, profiles, and APs under management that belong to a management group while prohibiting changes to the management group. Note This option is not displayed when the Account Type is set to "Admin". You can edit all management groups and manage the floor maps, associated APs, and profiles they belong to.
   Feature Permissions | Read Only | If the account type is "User", specify the permissions for certain Vista Manager EX features. Read Only You can only view the items in the selected category. Read/Write You can view, change and delete items in the selected category. This option is not displayed when the Account Type is set to "Admin". Admin accounts have the same permissions as "Read/Write".
   Sites and Groups | None | You can set management group permissions for particular sites and groups. There are no individual settings by default. The groups include each automatically registered AMF area in the AMF network, and a "Network" badge next to these group names. Management groups are listed in alphabetical order, regardless of their types. Accounts can be granted one of the following permission levels for each site or group. Read/Write You can view the status or change the settings of the relevant site or group. Settings include performing AMF backups of devices, SSH connections to AMF devices, editing device and event notes and changing backup settings on the AMF master. Read Only You can only view the status of the relevant site or group. The user can view topology maps of management groups and devices, device information, device and event notes, and logs of Abnormal or Normal events. If none of the permissions are checked, no information on management groups is displayed. Note The "My Account" screen, which is displayed by clicking the user ID in the top right-hand corner, does not display the names of sites or groups if the user does not have any of these permissions. If a device belongs to more than one site or group, it will follow the stronger privilege setting among them. This option is not displayed when the Account Type is set to "Admin". Settings can be viewed and changed for all sites and groups.

7. Confirm and adjust display refresh rates for the AWC Plug-in.

   Table 5: Account Configuration 5
   Item Name | Value | Description
   --- | --- | ---
   Refresh Rates | (default) | Specifies the automatic display refresh intervals (in seconds) for the AWC Plug-in. AP Status (Default: 60 secs) Floor MAP (Wireless Status) (Default: 60 secs) Floor Map Details(Wireless Clients) (Default: 5 sec) Floor Map Details (Smart Connect) (Default: 5 sec)

8. Select a default Country Code for the AP profiles.

   Table 6: Account Configuration 6
   Item Name | Value | Description
   --- | --- | ---
   Country Code | NZ - New Zealand | Specify the default Country Code for AP Profiles in the AWC Plug-in. This is used to properly configure APs for radio frequency regulation in the country. The default is None.

9. Select the Language for the web interface and configure the session Timeout.

   Table 7: Account Configuration 7
   Item Name | Value | Description
   --- | --- | ---
   Language | English | Select the language used on the management web interface. You can select from Auto Detect (Default), English, and Japanese. When set to "Auto Detect", the language is selected according to the web browser's language preference.
   Timeout | 10 minutes | Specify the web interface's session timeout. A login session times out and the login page reappears after the configured number of minutes of inactivity. Available options are 5 min, 10 min, 20 min, 30 min, 1 hour, and Never. If you set Timeout to Never, a login session never times out and automatic logout is disabled. Timeout is set to 5 minutes by default.

10. Set the email notifications about Event and Syslog rules, and the network topology layout.
    Since this account is for the AWC Plug-in operation only, these settings can be omitted.

    Table 8: Account Configuration 8
    Item Name | Value | Description
    --- | --- | ---
    Receive Event and Syslog Rule email notifications | Disable | Specify whether to receive email notifications to the relevant account when email notification is configured in an Event Rule or Syslog Rule.
    Network Topology Layout | (blank) | Select the layouts you want to apply to the network map at first login or allow to be applied thereafter.

11. Click "Save".
    You can see the created user "1-2F Manager" was added to the list.

14 Dec 2023 11:07