Configure group users

For users / network managers who uses one AmpCon server for switches in different locations / sites,  they usually need to give site managers the permission to run ZTP, import, license or other lifecycle actions. 

Based on that , from v1.12.1, AmpCon support to add group based users which can only manage the switches belongs to the group member of this user.

Pre-step. Create groups 

Refer to the guidence here to add groups and include the switches which you want the group user can manage.

Automated day-to-day Policy Enforcement on a Group of Switches#CreatingSwitchGroupsforOperationsandAutomatedPolicyEnforcement 

Add Group user

In Users > Manage Users, click "Add User" button to create user.

In "User Type", select "Group" if you want to create a group user.

And specify the group name in "Group Name" dropdowns.

If the group user includes multiple group members, click "+" button to add a new dropdown and then specifiy the group name from dropdowns.

Filled the form with other required information, then click "Create" button to create group user.

After user created，group users can login AmpCon page and check the switch details.

Edit Group user

In Users > Manage Users, choose the "Edit" button for the group user inline.

Change the group members of the user or other user information according to the requirement in the pop-up modal.

Click "Save" once all information changes done.

Different user role permission for group users

The main differences between group user and local user is that group users can only access to the switches belongs to the group user.

(Super User level can manage the switch members for groups, which means they can change the switch members and then access to different switches.)

• Super User
• • Provides access to all AmpCon functions
  • Only role that can create new users
  • Manage the group members for different groups.
• Admin
  • Provides access to all AmpCon functions, including creating and maintaining templates
• Operator
  • Cannot change templates or AmpCon global settings
  • Can perform all switch-related config/deployment/lifecycle/SDN functions
• Read Only
  • Access to all display functions, including switch lists, alarms, and configs
  • The following operations are not allowed with Read-Only access:
    • Connect via SSH to switch, or change any AmpCon settings/configurations
    • Run any Lifecycle functions except display and Map View
    • Create/change Configs or Templates
    • Run License Audits