<%NUMBERING1%>.<%NUMBERING2%>.<%NUMBERING3%> PRTG Manual: System Administration—User Groups
To open system administration, select Setup | System Administration from the main menu. Click on the tabs to change the different settings.
System Administration Bar
You can define the following aspects of your PRTG system setup:
The PRTG administrator users can change existing user groups or add new ones, and define the users that are member of a certain group.
If you use PRTG on premises and open the system administration page from another administration page, PRTG will ask you to enter your credentials again for security reasons if 15 minutes (900 seconds) have passed since your last credential-based login. A dialog box will appear. Enter your Login Name and Password for PRTG in the corresponding fields and confirm to continue.
All the security settings as well as further rights management are conducted via the user groups. This means that group membership controls what a user may do and which objects the user will see when logged in. The actual rights for each object can be defined in an object's settings. There, you can define different rights for each user group.
The User Groups table shows you all existing user groups with various information at a glance. You can see all Members of a group as well as all user accounts that have this group as Primary Group or as Active Directory Group.
- To change a user group's settings, select it from the list by clicking on the group name.
- To add a new user to PRTG on premises, click the New User button. The options are the same as for existing users (with slight differences).
- To add a new user to PRTG on demand, click the Invite User button. The options are almost the same as for existing users, but the initial login password will be generated automatically. The new user can change it later. Click Send Invite to save your settings and to send the invitation per email to the defined Primary Email Address.
- To batch-add several users at once in a simple way, please click the Multiple New Users button. In the dialog box that appears, select an existing user group from the dropdown menu and enter or paste a list of email addresses. They can be separated by a space, comma, semicolon, or a new line. Click the Add button to confirm. For each address, PRTG will create a new local user account within the selected user group, carrying the email address as value for Login Name, Username, and Email Address. A new password will be generated automatically and sent to the email address.
- To add a new user group, click the New User Group button. The options are the same as for existing groups (with slight differences).
- For each user group you create, PRTG automatically adds a new device group with the name [group_name] home to the device tree.
- For each user group you create, PRTG automatically adds a new email notification to notifications with read access rights for this user group. It has the name Email to all members of group [group_name].
- By default, there are no access rights on existing objects for a newly created PRTG user group. Initially, users in this group will not see any objects in the PRTG device tree except the automatically created home group (with write access rights). Please edit the object settings in your device tree and set access rights for your newly created user group in the Inherit Access Rights section.
The easiest way is to set these rights in the Root Group Settings.
The multi-edit option is not available for the standard user groups PRTG Administrators and PRTG Users Group.
Predefined objects cannot be deleted!
If you want to delete an Active Directory group, you have to delete all users that are in this group in PRTG first. This is because users that you add with Active Directory Integration always have this group as their primary group.
User Groups Settings
This documentation refers to the PRTG System Administrator user accessing the Ajax interface on a master node. If you use other user accounts, interfaces, or nodes, you might not see all of the options in the way described here. If you use a cluster installation, note that failover nodes are read-only by default.
|
User Group Name
|
Enter a name for the user group.
|
Administrative Rights
|
Define if the members of this group will be PRTG administrators. If you enable this option, all members of this group will have full access to all monitoring objects, maps, reports, user accounts and user groups, and they can change the PRTG monitoring configuration. Choose between:
- Yes: Give full PRTG administrator rights to all members of this group.
- No: Do not make members of this group administrators. Access to monitoring objects for users that are member of this group will be controlled by the Access Rights settings defined in the Object Settings of Probes, Groups, Devices, or Sensors.
This option is especially useful in combination with the Active Directory option below.
|
Default Homepage
|
Enter a PRTG internal web page. This will set the default homepage for all new users created with this group. A user will be redirected to this page after logging in. This concerns new users either added by an Active Directory login or by the Add multiple users feature.
|
Use Active Directory
|
Define if this PRTG user group will be connected to a group in your active directory. Choose between:
- Yes: Connect this group to an AD group. Choose below. For detailed information, please see Active Directory Integration.
- No: Do not use Active Directory integration for this group, but choose local user accounts instead.
This option is not available in PRTG on demand.
|
Active Directory Group
|
If a valid Active Directory Domain is set in the System Administration—Core & Probes settings and Active Directory integration is enabled above, a drop down menu will appear, showing the groups in your Active Directory. Choose the group whose members will be able to log in to PRTG using their Active Directory domain credentials. All of those AD users will be in the security context of the PRTG group you're about to create/edit. For detailed information, please see Active Directory Integration.
If your Active Directory contains more than 1000 entries in total, PRTG will display an input field instead of a drop down menu. This is done due to performance reasons. In the input field, you can enter the group name only. PRTG will then add the prefix automatically.
This option is not available in PRTG on demand.
|
New User Type
|
If Active Directory integration is enabled above, define the default rights for all new users in this user group. If a user logs in for the first time using Active Directory credentials, PRTG will automatically create a new local user account for this user, applying the user type defined here. Choose between:
- Read/Write User: The user may change settings.
- Read Only User: The user may not edit any settings except the own password. This is a good choice for public or semi-public logins.
|
Allowed Sensors
|
Define if members of this user group will be able to create all available sensor types or only specific ones. Choose between:
- Users may always create all sensor types: No restrictions for group members are applied.
- Users may create certain sensor types only: Choose the allowed sensor types below. This option is especially interesting for a Managed Service Provider (MSP).
|
Users May Create These Sensor Types
|
This field is only visible if you defined that the users in this group are only allowed to create certain sensor types. A list of all available types is shown with their name. Select the desired types by adding check marks in front of the respective lines. You can also select and deselect all items by using the check box in the table head.
|
Ticket System Access
|
Define if the members of this user group will be able to use the PRTG ticket system. Choose between:
- Members can use the Ticket System: No restrictions for group members are applied.
- Members can NOT use the Ticket System: The Tickets option in the main menu bar will not be visible to users in this group.
|
|
Members
|
This setting is available only if Active Directory integration is disabled above. Define which local user accounts will be a member of this group. To add a user account from the list, add a check mark in front of the username. The user accounts available depend on your setup.
|
|
User List
|
Shows a list of all user accounts with this group set as primary group. This is shown for information purposes only. You can change it in a user account's settings.
|
Comments
On the Comments tab you can enter free text for each object. You can use this function for documentation purposes or to leave information for other users.
Click Save to save your settings. If you change tabs or use the main menu, all changes to the settings will be lost!
History
In the History tab all changes in the settings of an object are logged with a timestamp, the name of the PRTG user who made the change, and a message. The history log retains the last 100 entries.
Click the Continue button to save your settings. If you change tabs or use the main menu, all changes to the settings will be lost!
Others
There are some settings that you must make in the PRTG Administration Tool, available as native Windows application. For more details, please see the sections:
|