Cisco IQ Fundamentals - System Settings

So now that we got all the foundational knowledge out of the way, let's go into the tasks which are go over to the system settings application, and then we're going to be able to set some of the settings and be able to view and continue our onboarding process of our new account. The 1st thing that you're gonna see is this account details page. The useful information here is that you can easily see who your account administrators are.00:06So maybe you got access to the platform, but you're trying to figure out who the administrator is, maybe there's a new hire that joined your company that needs access, you're not sure who adds accounts. You can go and log in, take a look at who the account admins are, then reach out to them. Okay, so 1st we're gonna go out a user, so we're gonna go in our system settings to identity and access.00:26I'm gonna click on add user.00:46And then I can add a user by putting in their email address, and if I have user groups created, which I'll talk about in a second, I can add the user to a user group, and then I'm gonna define the role and our roles are very basic in Cisco IQ. We just have administrator.00:51Who can do read and write actions or viewers who can only just see things. I can select an option on whether I want to send an invitation email or not, and then I want to click save and add the user. Okay, now let's talk about the concept of resource groups. So resource groups allow us to logically group together a set of devices that we want to control access into. So we talked.01:08Talked earlier about how we can have devices onboarded into one account or another, and then they're completely logical separate.01:28Between the two accounts in Cisco IQ, but maybe you want all the devices into one account, but you maybe have some users that you want to restrict visibility or access to the devices for. And resource groups are a way to go do that. So I can take devices, I can add them into a resource group, and then I can control what users or specifically what user groups have.01:34Have access and what type of access into those resource groups. So hereby defining basically what users have viewing or administrative privileges into sets of devices.01:54So the way that I do that is I go and I create a resource group, so maybe I would do something here and say I'm gonna add my IT devices in as a group and then I'm gonna click manage assets and then I'm gonna go through and I'm gonna go add the assets in that I need to. And then if I were to click and apply this, I would go click apply.02:05And then I'd have my resource group with my devices in here. So now that we've added users, you might have a commonality between users. You might have a set of users that maybe are part of a specific department or a group of users that should see or not see a certain set of devices. We can use user groups to facilitate that. So user groups are simply a logical entity, a set of users.02:21I can go and create a user group, I can name it something like IT department.02:41And then I can click manage users and then I can go and multi select the users that I need to add to this group, and then I can select the role. So if I choose viewer, I can specify the specific resource group or resource groups that the user group should have view access into.02:46So this gives me that granular role based access capability or if they need to be an administrator, then that's an administrator over the entire organization, so they're gonna be able to see and change everything so then you wouldn't assign to resource groups in that manner. But this gives you a flexible way to have sets of groups that only have view access.03:04Two specific resource groups or basically specific devices allowing maybe your IT users to only see and interact with IT devices and then maybe you've got your sales line of business that could see, I don't know, devices that support sales, if they were some some technical people in sales interacting with those devices, and then you'd have your administrators that would be.03:22Global administrators over the entire IQ account that would be able to add and change users, devices across all sets of resource groups.03:42