The Accounts tab enables Administrative Account Users to create, edit and/or delete other Account Users for the Web Console. The Accounts tab is only visible to Administrative Account Users.
All Account Users (except for Administrative Account Users) must be imported in the Accounts tab before they can access the Web Console (or connect their PC-Duo Master to the RAS server). The easiest way is to import individual or group Windows accounts from Active Directory or from the Account User’s local system. This enables Account Users to use their Windows credentials to access the Web Console (or single-sign on, if the same credentials were used to login to Windows on the Account User’s machine). In the example below, four different Web Console accounts are defined; two individual Account Users and two group Account Users.
Until now, authentication had been limited to Windows Authentication. Version 10 allows us to break from that in order to use alternate identity providers and provide multi-factor authentication. The initial release will include support for talking directly to the Microsoft Azure Active Directory (AAD) tenant service.
Please see the PC-Duo Azure Integration PDF from www.vector-networks.com/documentation for details on Azure AD integration.
Below is a table of fields, values and actions available for each Account User:
Field
Description
Account Type
Icon indicates if this is an individual or group Windows account.
Icon representing single account
Account User is an individual Windows account.
Icon representing multiple accounts
Account User is a Windows security group.
Account Name
<Domain>\<Username> or <Domain>\<Groupname> for the Account User.
Account Type
One of three types of Web Console accounts.
Administrator
Administrative Account User.
Master
Master Account User.
Personal
Personal Account User.
Assigned Group/Host
Name of the Group(s) or Personal Host(s) to which the Master or Personal Account User, respectively, has been granted access.
Last Login
Date & time when Account User last logged into the Web Console.
Actions
Actions that can be taken to manage this Web Console account.
Edit
Change Account type (and assign Group if account type is Master, or Personal Host if account type is Personal) for this account
Remove
Delete this Account User from the Web Console
Note: This will also delete the Account User from the Gateway Server but from Active Directory or the local machine.
Because the Web Console accommodates both individual and group accounts, a Web Console Account User, when he/she attempts to login, may present Windows credentials that map to more than one Web Console Account User account. Below is a table that shows the order of precedence for the rules that the Web Console uses to determine which type of Web Console account the Account User will be assigned:
Rule
Description
1
If the Web Console Account User presents credentials that match those of an existing Web Console individual account (i.e. the credentials presented at login are the same as those for the individual Windows account to which the Web Console account is linked), then the Web Console Account User will be granted access to use that Web Console account, as long as there is at least one available license for that account type (Administrator, Master, Personal).
Note: An individual Windows account can only be associated with one and only one Web Console Account User account.
Note: If the Account User credentials are found to match those associated with an Web Console individual account, any match with any group accounts will be ignored
2
If the Web Console Account User presents credentials that do not match those of any Web Console individual account, the Web Console will check to see if those credentials can be found in any Windows security group that has been linked to a Web Console group account.
If the credentials are found to match those in more than one Windows security group, the Account User will be granted access to use the Web Console account with the account type that has the broadest access rights (i.e. Administrator, Master, Personal, in that order).
3
If the Account User credentials do not match those of any Web Console individual account, and are not found in any Windows security group linked to a Web Console group account, the Account User will be denied access to the Web Console.
