Knowledge Center > Tutorials
How To Configure User Account Permission Levels
ipMonitor provides a detailed User Account system to control User access to ipMonitor features. Each Account has its own List, Read, Write, Create, Delete, and Attributes settings. Administrators can apply different permission levels to various features throughout the software.
Rights and permissions can be configured on an individual Account basis. For example, Administrators can choose to allow Users to:
- View a Monitor but not change its configuration settings.
- Edit existing Groups but not create them.
- View, edit and create Maintenance Schedules but not delete existing ones.
- View, edit, create and delete Monitor Filters but not add Tags to these items.
- Etc.
Before You Begin
If you have not yet created your first Administrator Account using the ipMonitor Configuration Program, please refer to the tutorial entitled 'How To Create Administrator, User and Guest Accounts in ipMonitor'. Follow the instructions provided in the 'Creating the First Administrator Account' section to be able to log in to the software.
Note: This tutorial is not designed to be followed sequentially. Rather, it details all the possible permissions level combinations that can be enabled using the Access Map provided for User and Guest Accounts. We recommend that you use this tutorial as a reference document when configuring new User and Guest Accounts.
Available Resources
|
Click the PDF icon to open a printable PDF version of this tutorial. It includes all the information found here, including images from the ipMonitor software, diagrams, and links to additional resources.
|
Defining the Three Classes of ipMonitor Accounts
Three classes of accounts can be created within ipMonitor:

Administrator Accounts
- Have full access to all ipMonitor features.
- Can create, edit and delete User Accounts.
- Are the only Accounts that have permission to access and administrate Credentials.
- Cannot be deleted until they are demoted to User status.
User Accounts:
- Allow Administrators to set individual access restrictions to directly control which ipMonitor features and interfaces a User can access.
- Can be given complete access to all ipMonitor features except Credentials, and the ability to administrate Accounts.
- Can be promoted to Administrator status, or demoted to Guest status at any time.
Guest Accounts
- Only have the ability to read or view data.
- Do not have access to the Administration Interface.
- Do not have the ability to change or save their own settings (beyond the current session).
- Provide a common User Name and Password to allow access to the Reporting Interface.
- Allow Administrators to limit the ability to view Monitor and Group names through the use of access constraints.
- Make it possible for Administrators to post the Account Credentials required to log in to the ipMonitor Reporting Interface on an intranet site, or distribute the User Name and Password to other departments and individuals who require limited access.
Using the Access Map to Control User Access to Various ipMonitor Features
Each User Account has its own Access Map. From here, Administrators can toggle various abilities and access restrictions.
The Access Map is divided into two sections. The top section contains User permission settings that control access to the Reporting interface, while the bottom section pertains to User permissions assigned to control access to the Administration web interface. Each available configuration option is detailed below.
Reporting Interface

Live Status
List - Allows the User to view the Admin Dashboard Live Status screens, including the NOC and Details views.
My Reports
List - Allows the User to view the Admin Dashboard My Reports Tab.
Administration Interface

Monitors
List - Allows the User to view the Monitors List using the Monitors menu option.
- If the Read option isn't checked in the Monitors section along with List, the User will not be able to view Monitor names. Instead, Monitor ID numbers will be shown.

Read - Provides the ability to view Monitor names within the Monitors List.
- The List option must be checked in order for the User to be able to access the Monitors List.
Write - Allows the User to enter Edit Mode for a Monitor, and modify its settings.
- The List and Read options must be checked in order for the User to be able to access the Monitor directly from ipMonitor's Administration interface.
Create - Allows the User to create a new Monitor.
- The List and Write options must be enabled in order for the User to be able to access the Monitors List and edit the new Monitor's settings.
Delete - Allows the User to delete a Monitor.
- The List and Write options must be enabled in order for the User to be able to access the Monitors List and delete the Monitor.
Attributes - Provides the ability to access a Monitor's custom Tags.
- Enabling the List and Read options in addition to the Attributes setting allows a User to read previously created Tags.
- Enabling the Write option along with List, Read and Attributes allows a User to add a new custom Tag to a Monitor.
Monitor Filters
TIP
The List option must be checked for the Monitors section in order for a User to access Monitor Filters from within the Administration interface.
|
List - Allows the User to view previously created Monitor Filters.
- If the Read ability isn't enabled in the Monitor Filters section, Filter ID numbers will be displayed instead of Filter names.
- If the Read ability isn't checked in the Monitors section, Monitor ID numbers will be displayed instead of Monitor names.
Read - Allows the User to view the names of previously created Monitor Filters.
- The List option must be checked in order for the User to be able to access previously created Monitor Filters.
Write - Allows the User to enter Edit Mode for a Monitor Filter, and edit its settings.
- The List and Read options must be checked in order for the User to be able to access the Monitor Filter directly from ipMonitor's Administration interface.
Create - Allows the User to create a new Monitor Filter.
- The List and Write options must be enabled in order for the User to be able to access the Monitors List and create a new Monitor Filter.
Delete - Allows the User to delete a Monitor Filter.
- The List and Write options must be enabled in order for the User to be able to access the Monitors List and delete the Monitor Filter.
Attributes - Provides the ability to access a Monitor Filter's custom Tags.
- Enabling the List and Read options in addition to the Attributes setting allows a User to read previously created Tags.
- Enabling the Write option along with List, Read and Attributes allows a User to add a new custom Tag to a Monitor Filter.
TIP
Enabling the Create, List, Read, Write and Attributes options allows the User to clone a Monitor Filter.
|
Groups
List - Allows the User to view the Groups List using the Groups menu option.
- If the Read ability isn't enabled in the Groups section, Group ID numbers will be displayed instead of Group names.
Read - Allows the User to view the names of previously created Groups.
- The List option must be checked in order for the User to be able to view the Groups List.
Write - Allows the User to enter Edit Mode for a Group, and edit its settings.
- The List and Read options must be checked in order for the User to be able to access the Group directly from ipMonitor's Administration interface.
Create - Allows the User to create a new Group.
- The List and Write options must be enabled in order for the User to be able to access the Groups List and create a new Group.
Delete - Allows the User to delete a Group.
- The List and Write options must be enabled in order for the User to be able to access the Groups List and delete the Group.
Attributes - Provides the ability to access a Group's custom Tags.
- Enabling the List and Read options in addition to the Attributes setting allows a User to read previously created Tags.
- Enabling the Write option along with List, Read and Attributes allows a User to add a new custom Tag to a Group.
TIP
Enabling the Create, List, Read, Write and Attributes options allows the User to clone a Group.
|
Alerts
List - Allows the User to view the Profiles List using the Alerts menu option.
- If the Read ability isn't enabled in the Alerts section, Profile and Alert ID numbers will be displayed instead of names.
Read - Allows the User to view the names of previously created Profiles and Alerts.
- The List option must be checked in order for the User to be able to view the Profiles List.
Write - Allows the User to enter Edit Mode for a Profile or Alert, and edit its settings.
- The List and Read options must be checked in order for the User to be able to access the Profile or Alert directly from ipMonitor's Administration interface.
Create - Allows the User to create new Profiles and Alerts.
- The List and Write options must be enabled in order for the User to be able to access the Profiles List and create new Profiles and Alerts.
Delete - Allows the User to delete a Profile or Alert.
- The List and Write options must be enabled in order for the User to be able to access the Profiles List and delete a Profile or Alert.
Attributes - Provides the ability to access a Profile or Alert's custom Tags.
- Enabling the List and Read options in addition to the Attributes setting allows a User to read previously created Tags.
- Enabling the Write option along with List, Read and Attributes allows a User to add a new custom Tag to a Profile or Alert.
TIP
A User's ability to access Content Generators is also toggled through the Alerts attributes:
- The Read option enables a User to view Content Generators.
- The Write option enables a User to edit a Content Generator.
- The Create option enables a User to add a new Content Generator.
- The Delete option enables a User to delete a Content Generator.
The List option must be checked in order for the User to be able to view the Profiles List and access Content Generators.
|
Logs
List - Allows the User to view the Log List using the Logs menu option.
Read - Allows the User to open log files and view them from within the ipMonitor Administration interface.
Write - Allows the User to 'roll' log files.
Delete - Allows the User to delete a log file.
TIP
When toggling permissions to open, roll or delete log files, the List ability must be enabled in combination with the Read, Write or Delete permissions in order for the User to access the log files through ipMonitor's Administration web interface.
|
Tools
List - Allows the User to access the RegEx Wizard, SNMP Tree, SNMP Search, SNMP Wizard and Server / Workstation Control tools through the Tools menu option.
Maintenance
List - Allows the User to view the Maintenance Schedule List using the Automation menu option.
Read - The Read option in the Maintenance section is used in combination with other permissions:
- When used in combination with the List and Write permissions, it allows the User to edit a Maintenance Schedule.
- When used in combination with the List and Attributes options, it allows a User to read custom Tags attached to Maintenance Schedules.
- When used in combination with the List, Attributes, and Write options, it allows a User to read and create new custom Tags to attach to Maintenance Schedules.
Write - Allows the User edit a Maintenance Schedule (including Internal Maintenance).
- The List and Read options must be checked in order for the User to access the Maintenance Schedule directly from ipMonitor's Administration interface.
Create - Allows the User to create new Maintenance Schedules.
- The List and Write options must be enabled for the User to be able to access the Maintenance Schedule List and create new Maintenance Schedules.
Delete - Allows the User to delete a Profile or Alert.
- The List and Write options must be enabled for the User to be able to access the Maintenance Schedule List and delete a Maintenance Schedule.
Attributes - Provides the ability to access a Maintenance Schedule's custom Tags.
- Enabling the List and Read options in addition to the Attributes permission allows a User to read previously created Tags.
- Enabling the Write option along with List, Read and Attributes allows a User to add a new custom Tag to a Maintenance Schedule.
TIP
Enabling the Create, List, Read, Write and Attributes settings allows the User to clone a Maintenance Schedule.
|
Reports & Publishers
List - Allows the User to access Configurable Reports and Report Publishers using the Reporting menu option.
- The Read option must be enabled in order for the User to view previously configured Reports and Report Publishers.
Read - Allows the User to view the names of previously created Configurable Reports.
- The List setting must be checked in order for the User to access the Configurable Report List.
Write - Allows the User to edit a Configurable Report.
- The List and Read settings must be checked in order for the User to access the Configurable Report directly from ipMonitor's web interface.
Create - Allows the User to create a new Configurable Report.
- The List and Write options must be enabled in order for the User to access the Configurable Report List and create a new Configurable Report.
Delete - Allows the User to delete a Configurable Report.
- The List and Write options must be enabled in order for the User to access the Configurable Report List and delete a Configurable Report.
Attributes - Provides the ability to access a Configurable Report's custom Tags.
- Enabling the List and Read options in addition to the Attributes setting allows a User to read previously created Tags.
- Enabling the Write option along with List, Read and Attributes allows a User to add a new custom Tag to a Configurable Report.
TIP
Enabling the Create, List, Read, Write and Attributes settings allows the User to clone a Configurable Report.
|
Server Settings
List, Read, Write - All three permissions must be enabled in order to:
- Allow a User to access the Server Settings screen and edit its settings.
- Allow a User to view and edit Log Settings.
Notes
List - Allows the User to access the Notes board using the Quick Links menu option.
- The Read option must be enabled in order for the User to view previously posted Notes.
Read - Allows the User to view previously created Notes.
- The List setting must be checked in order for the User to access the Notes board.
Write, Create - Allows the user to post new Notes.
- The List and Read settings must be checked in order for the User to access the Notes board directly from ipMonitor's Administration interface.
Additional Resources
For more information regarding ipMonitor Accounts, refer to the Security section of ipMonitor's Context-Sensitive Help system, then select Accounts. The Context-Sensitive Help can be accessed by clicking the Help link located in the top right corner of ipMonitor's Administration web interface.
< Back

Last Updated: April 12, 2006 | What did you think of this topic?