Next Topic

Previous Topic

Book Contents

Master User vs. Standard Users

Master Users vs. Standard Users

A master user is a VSA user that uses a Master user role and a Master scope. The Master user role provides user access to all functions throughout the VSA. The Master scope provides access to all scope data objects throughout the VSA. A Master user role can be used with a non-Master scope, but a Master scope cannot be used with a non-Master role. KServer management configuration and other specialized functions can only be performed by Master role users. Master role users have an additional ability to take ownership of user-defined data objects. The term standard user is sometimes used to indicate a user that does not use a Master user role and a Master scope. When VSA users are listed on a page, a background of two alternating shades of beige designates Master role users. A background of two alternating shades of grey designates non-Master role users.

Master Users

  • Any user can be assigned a Master user role and Master scope, if sufficient roletype licenses exist.
  • Master role users can view and operate all navigation and control options provided by the user interface.
  • Master scope users can view, add, edit or delete all scope data objects: organizations, machine groups, machines, departments, and service desks.
  • Masters can add or delete any user, including other master users. Since even a master user can't delete their own account while logged on, the system requires at least one master user be defined at all times.

Standard Users

  • A standard role user cannot see roles they have not been granted permission to see.
  • A standard scope user cannot see data objects or users they have not been granted permission to see.
  • Standard users can create other users, scopes and roles, if given access to these functions.
  • A standard user can not grant access privileges beyond the ones the standard user has.
  • Standard users, if permitted function access, can only create other standard users, not master users.
  • By default, a new standard user inherits the scopes and roles of the standard user that created him.
  • If a master user creates a new standard user, the standard user inherits no scopes or roles. Using this method the master user has to manually assign the scopes and roles of the new standard user.

Machine Users

  • Machine users use machines with VSA agents installed on them. They should not be confused with VSA users who can logon to the VSA.
  • Machine users can click the agent icon on the machine's system tray to see a VSA Portal Access window of functions and data related to that single machine. Portal Access is called Live Connect when accessed from the VSA.
  • Access to Portal Access functions are determined by the machine role the machine is assigned to. Managed machines are assigned to the Default machine role by default and have access to all machine user Portal Access functions, unless limited by a VSA user.
  • Data object access from the machine is determined by the Anonymous scope. Currently, the only data objects enabled by the Anonymous scope are Service Desk tickets. All other data seen in Portal Access is generated by the machine itself.