User account basics

Each user who is allowed access to the PMAC GUI is assigned a unique Username. This Username and the associated password must be provided during log-in. After a user defined number of consecutive failed login attempts within a user defined window, a user account is disabled. See General Options administration elements for details on setting the Maximum Consecutive Failed and Lock out window variables.

Each user is also assigned to a group (multiple users who need access to the same set of functions). Permissions to a set of functions are assigned to the group. The permissions determine the functions and restrictions for the users belonging to the group.

A user must have Users or Groups administrative permissions to view or make changes to user accounts or groups. The authorized user can set up or change user accounts and groups, enable or disable user accounts, set password expiration intervals, configure session timeouts, and change user passwords.

By default the PMAC comes with three user accounts already provisioned; the first is the guiadmin account. This account is also known as the PMAC GUI superuser and belongs to the admin group. It has access to all views and menu items. This account is always enabled, and the maximum concurrent logins is unrestricted and cannot be changed. The second default account is pmacop and belongs to the ops group. As the name implies it has permissions suitable for most operations personnel. Members of the admin group can make changes to this user account. The third default account is guest and belongs to the guests group. It has permissions suitable for guests with limited administrative permissions. Members of the admin group can make changes to this user account.