Template:Networking rutos manual users: Difference between revisions

From Teltonika Networks Wiki
No edit summary
No edit summary
(15 intermediate revisions by 2 users not shown)
Line 1: Line 1:
==={{#switch:{{{series}}}|TAP100|TAP200=User 'admin' settings|#default=Change Password}}===
==={{#ifeq:{{{series}}}|TAP100|User 'admin' settings|Change Password}}===
----
----
The <b>User settings</b> section is used to change the password of the current user.
The <b>User settings</b> section is used to change the password of the current user.


[[File:Networking_rutos_users_change_password_v3.png|border|class=tlt-border]]
[[File:Networking_rutos_users_change_password_v1.png|border|class=tlt-border]]
 
{{#ifeq:{{{series}}}|TAP100||===System Users===


{{#switch:{{{series}}}|TAP100|TAP200=|#default= ===System Users===
----
====Summary====
====Summary====
----
----
Line 23: Line 23:
The <b>Groups</b> section lists available user groups of which there are three:
The <b>Groups</b> section lists available user groups of which there are three:


[[File:Networking_rutos_users_groups_v2.png|border|class=tlt-border]]
[[File:Networking_rutos_users_groups_v1.png|border|class=tlt-border]]
----
----
<ul>
<ul>
Line 38: Line 38:
             <li>limited read access; by default, users belonging to this group cannot view these pages:
             <li>limited read access; by default, users belonging to this group cannot view these pages:
                 <ul>
                 <ul>
                     <li>System → Administration → Users Settings → System Users</li>
                     <li>System → [[{{{name}}} Users|Users]].</li>
                    <li>System → Administration → Profiles</li>
                    <li>System → Maintenance → Backup</li>
                    <li>System → Firmware</li>
                    <li>System → Maintenance → CLI</li>
                    <li>System → Setup Wizard</li>
                    <li>System → Maintenance → Custom Scripts</li>
                </ul>
            </li>
            <li>limited write access; by default, users belonging to this group cannot view these pages:
                <ul>
                    <li>System → Administration → Users Settings → System Users</li>
                    <li>System → Maintenance → Backup</li>
                    <li>System → Firmware</li>
                    <li>System → Maintenance → CLI</li>
                    <li>System → Setup Wizard</li>
                    <li>System → Maintenance → Custom Scripts</li>
                    <li>System → Administration → Access Control → General</li>
                    <li>System → Administration → Profiles</li>
                 </ul>
                 </ul>
             </li>
             </li>
            <li>unlimited write access by default;</li>
             <li>access rights can be modified.</li>
             <li>access rights can be modified.</li>
         </ul><br>[[File:Networking_rutos_manual_users_admin_visualization.png]]
         </ul><br>[[File:Networking_rutos_manual_users_admin_visualization.png]]
Line 68: Line 51:
             <li>limited read access; by default, users belonging to this group cannot view these pages:
             <li>limited read access; by default, users belonging to this group cannot view these pages:
                 <ul>
                 <ul>
                     <li>System Administration Users Settings System Users</li>
                     {{#ifeq:{{{mobile}}}|0||<li>Services Mobile Utilities Messages [[{{{name}}} Mobile_Utilities#Send_Messages|Send Messages]];</li>}}
                     <li>System → Firmware</li>
                     <li>System → [[{{{name}}} Users|Users]];</li>
                     <li>System → Maintenance → Backup</li>
                     <li>System → [[{{{name}}} Firmware|Firmware]];</li>
                    <li>System → Administration → Access Control</li>
                     <li>System [[{{{name}}} Reboot|Reboot]].</li>
                    <li>System → Maintenance → CLI</li>
                    <li>System → Maintenance → Custom Scripts</li>
                    <li>System → Maintenance → Troubleshoot</li>
                    <li>System → Package Manager</li>
                    <li>Network</li>
                    <li>System → Setup Wizard</li>{{#ifeq:{{{wifi}}}|1|
                    <li>Status → Wireless → Channel Analysis</li>|}}
                     <li>Services Hotspot → General → Userscripts</li>{{#ifeq:{{{mobile}}}|1|
                    <li>Services → Mobile Utilitites → Messages → Send Messages</li>|}}
                 </ul>
                 </ul>
             </li>
             </li>
Line 94: Line 68:
A group's parameters can be set in its <b>Group Settings</b> page. To access the Groups Settings page, click the 'Edit' button next to the group's name. Below is an example of the Group Settings section:
A group's parameters can be set in its <b>Group Settings</b> page. To access the Groups Settings page, click the 'Edit' button next to the group's name. Below is an example of the Group Settings section:


[[File:Networking_rutos_users_groups_group_settings_v2.png|border|class=tlt-border]]
[[File:Networking_rutos_users_groups_group_settings_v1.png|border|class=tlt-border]]


<table class="nd-mantable">
<table class="nd-mantable">
Line 105: Line 79:
       <td>Write action</td>
       <td>Write action</td>
       <td>Allow {{!}} Deny; default: <b>Allow</b></td>
       <td>Allow {{!}} Deny; default: <b>Allow</b></td>
       <td>Specifies whether to deny or allow write access for users belonging the group.</td>
       <td>Specifies whether to allow or deny write actions for users in the group. Write actions consist of changing configurations and performing certain actions (such as clicking buttons).<br>This field directly correlates with the "Write access" field below it, because the selected write action will apply to pages specified in that field.</td>
     </tr>
     </tr>
     <tr>
     <tr>
Line 111: Line 85:
       <td>path(s) to page(s); default: <b>
       <td>path(s) to page(s); default: <b>
             <ul>
             <ul>
                 <li><b>System > Administration > User Settings > Change Password</b></li>
                 <li><b>system/multiusers/change_password</b></li>
             </ul>
             </ul>
         </b></td>
         </b></td>
       <td>Controls the ability of users to change and execute the contents (e.g. Network > Lan).</td>
       <td>Path(s) to the page(s) to which the selected "Write action" will be applied. Click the plus symbol to add multiple entries.</td>
     </tr>
     </tr>
     <tr>
     <tr>
       <td>Read action</td>
       <td>Read action</td>
       <td>Allow {{!}} Deny; default: <b>Deny</b></td>
       <td>Allow {{!}} Deny; default: <b>Deny</b></td>
       <td>Specifies whether to deny or allow read access for users belonging the group.</td>
       <td>Specifies whether to allow or deny read actions for users in the group. Read actions consist of viewing pages on the WebUI.<br>This field directly correlates with the "Read access" field below it, because the selected read action will apply to pages specified in that field.</td>
     </tr>
     </tr>
     <tr>
     <tr>
       <td>Read access</td>
       <td>Read access</td>
         <td>path(s) to page(s); default: <b>in the picture above</b></td>
         <td>path(s) to page(s); default:
            <ul>
                <li><b>services/mobile_utilities/sms/send</b></li>
                <li><b>services/packages</b></li>
                <li><b>system/multiusers/</b></li>
                <li><b>system/flashops/</b></li>
                <li><b>system/backup</b></li>
                <li><b>system/admin/access_control</b></li>
                <li><b>system/cli</b></li>
                <li><b>system/uscripts</b></li>
                <li><b>system/wizard</b></li>
                <li><b>services/packages/upload</b></li>
                <li><b>network/</b></li>
                {{#ifeq:{{{wifi}}}|1|<li><b>services/hotspot/general/userscripts</b></li>}}
            </ul>
        </td>
       <td>Path(s) to the page(s) to which the selected "Read action" will be applied. Click the plus symbol to add more entries.</td>
       <td>Path(s) to the page(s) to which the selected "Read action" will be applied. Click the plus symbol to add more entries.</td>
     </tr>
     </tr>
Line 154: Line 143:
By default, there is only one user called "admin":
By default, there is only one user called "admin":


[[File:Networking_rutos_users_users_v3.png|border|class=tlt-border]]
[[File:Networking_rutos_users_users_v2.png|border|class=tlt-border]]


=====User Settings (edit user)=====
=====User Settings (edit user)=====
Line 162: Line 151:
<u>However</u>, you may want to add a new user at first. This can be done from the [[{{{name}}}_Users#Add_New_User|Add New User]] section below:
<u>However</u>, you may want to add a new user at first. This can be done from the [[{{{name}}}_Users#Add_New_User|Add New User]] section below:


[[File:Networking_rutos_users_add_new_user_example_v3.png|border|class=tlt-border]]
[[File:Networking_rutos_users_add_new_user_example.png]]


<ol>
<ol>
Line 173: Line 162:
Below is an example of a newly added user's settings page:
Below is an example of a newly added user's settings page:


[[File:Networking_rutos_users_user_settings_v3.png|border|class=tlt-border]]
[[File:Networking_rutos_users_user_settings.png|border|class=tlt-border]]


<table class="nd-mantable">
<table class="nd-mantable">
Line 189: Line 178:
       <td>New password</td>
       <td>New password</td>
       <td>string; default: <b>none</b></td>
       <td>string; default: <b>none</b></td>
       <td><li>Create a new password for the user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</li><li>Another option is to use the 'Dice' icon, which generates random passwords.</li></td>
       <td>Create a new password for the user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</td>
     </tr>
     </tr>
     <tr>
     <tr>
Line 200: Line 189:
       <td>admin {{!}} user; default: <b>user</b></td>
       <td>admin {{!}} user; default: <b>user</b></td>
       <td>The group to which the user belongs.</td>
       <td>The group to which the user belongs.</td>
    </tr>
        <tr>
      <td>Enable SSH access</td>
      <td>off {{!}} on; default: <b>off</b></td>
      <td>Enables SSH access (only for 'root' users).</td>
     </tr>
     </tr>
</table>
</table>
Line 212: Line 196:
The <b>Add New User</b> section is used to create additional users that can access the WebUI. After a new user is added, it will appear in the [[{{{name}}} Users#Users|Users]] section.
The <b>Add New User</b> section is used to create additional users that can access the WebUI. After a new user is added, it will appear in the [[{{{name}}} Users#Users|Users]] section.


[[File:Networking_rutos_users_add_new_user_v3.png|border|class=tlt-border]]
[[File:Networking_rutos_users_add_new_user.png|border|class=tlt-border]]


<table class="nd-mantable">
<table class="nd-mantable">
Line 228: Line 212:
       <td>Password</td>
       <td>Password</td>
       <td>string; default: <b>none</b></td>
       <td>string; default: <b>none</b></td>
       <td><li>A password for the new user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</li><li>Another option is to use the 'Dice' icon, which generates random passwords.</li></td>
       <td>A password for the new user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</td>
     </tr>
     </tr>
</table>}}
</table>}}
[[Category:{{{name}}} System section]]

Revision as of 09:08, 29 September 2023

Change Password


The User settings section is used to change the password of the current user.

System Users

Summary


The System Users page is used to add new user accounts that can access the device with different user credentials than the default ones. The newly added users can be assigned to one of two groups, either of which can be modified to limit WebUI read/write access rights for users belonging to each specific group.

This page is unrelated to SSH users. By default, there is one SSH user named "root" and it shares the same password as the default WebUI user named "admin".

This manual page provides an overview of the Users page in {{{name}}} devices.

If you're having trouble finding this page or some of the parameters described here on your device's WebUI, you should turn on "Advanced WebUI" mode. You can do that by clicking the "Advanced" button, located at the top of the WebUI.

Groups


The Groups section lists available user groups of which there are three:


  • root - highest level of authority. Key elements that define this group:
    • has unlimited read/write access;
    • additional users cannot be added to this group;
    • access rights for this group cannot be modified.


  • admin - second highest level of authority. Key elements that define this group:
    • limited read access; by default, users belonging to this group cannot view these pages:
      • System → [[{{{name}}} Users|Users]].
    • unlimited write access by default;
    • access rights can be modified.


  • user - lowest level of authority. Key elements that define this group:
    • no write access;
    • limited read access; by default, users belonging to this group cannot view these pages:
      • Services → Mobile Utilities → Messages → [[{{{name}}} Mobile_Utilities#Send_Messages|Send Messages]];
      • System → [[{{{name}}} Users|Users]];
      • System → [[{{{name}}} Firmware|Firmware]];
      • System → [[{{{name}}} Reboot|Reboot]].
    • access rights can be modified.


Additional note: you can view and/or edit settings for each group by clicking the 'Edit' button next to them. More on information on how to edit group access settings is located in the following section of this manual page.

Group Settings (edit group)

A group's parameters can be set in its Group Settings page. To access the Groups Settings page, click the 'Edit' button next to the group's name. Below is an example of the Group Settings section:

Field Value Description
Write action Allow | Deny; default: Allow Specifies whether to allow or deny write actions for users in the group. Write actions consist of changing configurations and performing certain actions (such as clicking buttons).
This field directly correlates with the "Write access" field below it, because the selected write action will apply to pages specified in that field.
Write access path(s) to page(s); default:
  • system/multiusers/change_password
Path(s) to the page(s) to which the selected "Write action" will be applied. Click the plus symbol to add multiple entries.
Read action Allow | Deny; default: Deny Specifies whether to allow or deny read actions for users in the group. Read actions consist of viewing pages on the WebUI.
This field directly correlates with the "Read access" field below it, because the selected read action will apply to pages specified in that field.
Read access path(s) to page(s); default:
  • services/mobile_utilities/sms/send
  • services/packages
  • system/multiusers/
  • system/flashops/
  • system/backup
  • system/admin/access_control
  • system/cli
  • system/uscripts
  • system/wizard
  • services/packages/upload
  • network/
Path(s) to the page(s) to which the selected "Read action" will be applied. Click the plus symbol to add more entries.
Examples

The easiest way to master the syntax is to navigate to page that you want to generate a path for and the copy the path from the URL of that page.

For example, to specify the path to the Network → Mobile page, navigate to the page, copy the page's URL address starting from the symbol "#" and paste it into one of the access fields:


However, the VPN window contains links to many different types of VPN pages. If you want to specify only one of them, you can do it as well. For example, to to specify the path to the IPsec page, add "/ipsec" to the path string:

services/vpn/ipsec

An asterisk (*) in the path string means that the every page from that point on is included in that path. For example, to generate a path that includes pages in the Services menu tab:

services/*

Or to simply include everything in the entire WebUI (if this path is combined with Read action: Deny, users from that group will not be able to login to the WebUI):

*

Users


The Users section lists all created users and provides the possibility to change their passwords and the group they belong to (with the exception of the default user "admin" which always belongs to the root group).

By default, there is only one user called "admin":

User Settings (edit user)

Each user's password and group parameters can be set in their User Settings pages. To access the User Settings page, click the 'Edit' button next to the user's name.

However, you may want to add a new user at first. This can be done from the [[{{{name}}}_Users#Add_New_User|Add New User]] section below:

  1. create a username;
  2. create a password for the user (must contain at least 8 characters, including at least one upper case letter and one digit);
  3. click the 'Add' button;
  4. click the 'Edit' next to newly added user.

Below is an example of a newly added user's settings page:

Field Value Description
Username string; default: none Displays the user's name.
New password string; default: none Create a new password for the user. The password must contain at least 8 characters, including at least one upper case letter and one digit.
Confirm new password string; default: none Repeat the new password.
Group admin | user; default: user The group to which the user belongs.

Add New User


The Add New User section is used to create additional users that can access the WebUI. After a new user is added, it will appear in the [[{{{name}}} Users#Users|Users]] section.

Field Value Description
Username string; default: none A custom name for the new user.
Password string; default: none A password for the new user. The password must contain at least 8 characters, including at least one upper case letter and one digit.

[[Category:{{{name}}} System section]]