Managing teams and users

NAVIGATION  Administration > Configuration > Teams and Users

SECURITY  Administrator access to VSA 10

Each user in a VSA 10 account is assigned to a team: either the built-in Administrators team that grants full access to the environment or a manually created User Defined team. Administrators can configure any number of user-defined teams, including the team membership, the members' access to systems, and the members' various permissions.

The Teams and Users page features two tabs: Teams and All Users.

Teams

The Teams tab displays all teams in the account and the number of users assigned to each team.

NOTE  Each user must be assigned to only one team.

Types of teams

  • Built-in: The preconfigured Administrators team cannot be edited other than its membership. Users assigned to this team are considered account administrators and have all access privileges to all systems and full permissions in the environment.
  • User Defined: Administrators can manually create and configure any number of additional teams that are open to modifications. User-defined teams can be used to grant certain users more limited access privileges to systems and more limited permissions in the environment.

Click Add Team in the upper-right corner of the list of teams. Enter a name for the team, and click Save to add the new team to the list or Cancel to close out of the dialog box.

Click a team to view its details on the right side of the page.

Click Edit in the lower-left corner of the section to edit any of the following team settings:

Tab Team type Description
Overview Built-in (Administrators), User Defined Allows you to view and edit the team Name (required) and Description.

NOTE  The default name and description for the Administrators team cannot be edited.
Members Built-in (Administrators), User Defined Allows you to view a list of any existing members (users) in this team, move members from different teams to this team, and move existing members in this team to different teams.

To move a member from a different team to this team, click Move In in the upper-right corner of the section and select a user from the drop-down menu.
To move a member from this team to a different team, hover over the Actions column in the applicable row, click Move Out, and select the different team from the drop-down menu.

The membership configuration and any changes to it are depicted for review before they are executed, as follows:

This user is an existing member of this team and will remain in this team upon clicking Save.
This user belonged to a different team and will be moved to this team upon clicking Save.
This user is an existing member of this team and will be moved to the different selected team upon clicking Save.

When ready to execute membership changes, click Save. Otherwise, click Cancel to restore the original configuration.
Access User Defined Allows you to grant users in this team specific levels of access to specific organizations, sites, and agent groups. Refer to Organizations.

The section displays a nested list of all organizations, sites, and agent groups in the account.
Click the drop-down arrows next to organization names to see the list of sites in those organizations, and click the drop-down arrows next to site names to see the list of agent groups in those sites.

Three different levels of access privileges are available to assign to each entity:

  • Full Access: Grants unrestricted access to the monitored system.
  • Read-only: Grants access to the monitored system but denies all commands.
  • No Access: Prevents all access to the monitored system, including its notifications and report data.

For a site, select Inherit to assign the site to the same priority level assigned to its organization.
For an agent group, select Inherit to assign the agent group to the same priority level assigned to its site.
Any sites and agent groups assigned to Inherit will automatically adopt the priority level of the parent if the parent selection is changed.

When ready to execute access level changes, click Save. Otherwise, click Cancel to restore the original configuration.
Permissions User Defined Allows you to grant or deny specific permissions to/from the users in this team. For descriptions of each of the available permissions, refer to User functions and permissions.

Select individual check boxes to grant those permissions, or you can select the check box of a permission heading to grant all of the associated permissions at once.

When ready to execute permission changes, click Save. Otherwise, click Cancel to restore the original configuration.

Click a team and click Delete in the lower-right corner of the page. If one or more users are currently assigned to the team, you will be prompted to reassign the user(s) to another existing team by selecting a different team from the New Team drop-down menu. Click Delete to execute the membership reassignment and team deletion or Cancel to close out of the dialog box.

NOTE  Upon deleting a team with multiple existing members, you must reassign all members to the same alternative team. However, you can assign any individual user to any different team via the Members tab. Refer to Members.

All Users

The All Users tab displays a list of all active users, inactive (deactivated but not deleted) users, and prospects who have been invited to create a user account. Deleted users are not included in the list.

To search for a specific user, enter their user ID or all or part of their username, full name, or email address in the Search user accounts bar. Press Enter on your keyboard or click Search to execute the search.

The list displays the following user details:

Field Description
Username The username is set during account creation and can be changed by the user via Administration > Account > My Settings. Refer to My Settings.
If a user has been invited to create an account but has not edited their username, the username is prefixed with inv. followed by the prefix of the user's email address to which the invitation was sent.
Full Name The full name is set during account creation and can be changed by the user via Administration > Account > My Settings or by any administrator via Administration > Configuration > Teams and Users > All Users > select a user. Refer to My Settings and Full Name in Viewing and editing user account details.
Team Name The name of the team the user is assigned to. Refer to Teams.
Email The email address associated with the user's account and used for login.
2FA

Displays On if the user has configured their 2FA settings or Off if the user has not yet done so. Refer to Two-factor authentication.

NOTE  A 2FA status of Off indicates the user has not yet gained access to any area of VSA 10 other than Administration > Account > 2FA and is required to set up 2FA for account access.
Status Each user has one of the following statuses:

Adding users

To learn about inviting new users or creating user accounts, refer to Inviting users to the account and Creating user accounts.

Accessing user account details

Click a user in the list to access their User Account Details page. For details about this page, refer to Viewing and editing user account details.