Cisco ScanCenter Administrator Guide, Release 5.2

Book Title

Chapter Title

User Management

PDF - Complete Book (5.99 MB) PDF - This Chapter (1.33 MB)
View with Adobe Reader on a variety of devices

User Management

The user management area of Cisco ScanCenter enables you to create groups, edit groups and users, and import users, dictionaries, and file information. When using Cisco AnyConnect Secure Mobility Web Security or Connector (including Cisco Adaptive Security Appliance and Cisco Integrated Services Router connector functionality), groups enable you to implement role-based web access policy.

Groups are evaluated as follows:

If Connector is configured to send internal group details, a check is made to see if the supplied group name matches any groups configured in Cisco ScanCenter. If a match exists, the matched group is selected. If the user belongs to more than one group, then any group containing the string “webscan” will be given priority.
If the username is matched but no group is matched, a check is made to see if the user belongs to an existing group.
If the group cannot be matched but the internal IP address is present, a check is made to see if the IP address matches a group IP expression.
If the group cannot be matched, a check is made to see if the external IP address matches a group IP expression.

Managing Groups

Two types of groups are supported in Cisco ScanCenter: directory groups and custom groups. Directory groups can be Windows Active Directory groups or LDAP groups. Custom groups enable you to create a group that contains any users, regardless of their Active Directory or LDAP group.

Procedure

Step 1	Click the Admin tab to display the administration menus.
Step 2	In the Management menu, click Groups to display the Manage Groups page.

Adding a Group

Before You Begin

Before you can add a directory group, you must first create the Active Directory or LDAP group on your server.

Procedure

Step 1	Click Add Group.
Step 2	Choose a Group Type from the drop-down list. Select either Custom or Directory group.
Step 3	Enter a Group Name. Custom groups can be named any combination of up to 256 alphanumeric characters Directory groups must have the prefix WinNT:// or LDAP://
Step 4	Click Submit.

What to Do Next

To add multiple groups at the same time, create a CSV file listing the same user in different groups. Follow the form: group, username, email address. Import the user list using Importing a User List. All the different groups are imported. You can then search for the common username that was used to bulk import the groups and delete the user from the Manage Users page at ScanCenter > Admin > Users.

Editing a Group

Procedure

Step 1	Navigate to Admin > Management > Groups to display the Manage Groups page.
Step 2	Click the hyperlink of the group name to display the Edit Custom Group page.
Step 3	To change the name, enter a new name for the group in the box and click Save. Alternatively, keep the existing name.
Step 4	Enter the required IP expressions, click Add, and click Save. For example: Single IP address: `192.168.0.1` Multiple IP addresses: `192.168.0.1, 192.168.0.2, 192.168.0.3` IP address range: `192.168.0.0/255.255.0.0`
Step 5	To remove an IP expression, select the check box next to the IP, click Remove, and click Save.
Step 6	Enter the required Active Directory or LDAP users in the Users box, click Add, and click Save.
Step 7	To remove users, select the check box next to the user, click Remove, and click Save.

What to Do Next

You can click Cancel to return to the Manage Groups page.

Removing a Group

In the Manage Groups page, select the check box of the group to be removed, and then click Remove to permanently remove the group. You will be prompted to confirm your action. You can select multiple groups to be removed. You cannot remove a group that is associated with a policy.

Caution

When a custom group has been removed, it cannot be recovered. Instead, you must create the custom group again.

Managing Users

Before You Begin

Users cannot be added individually. They must be imported from a text file containing a comma-separated list in the form group, username, email address for each user. When the list has been imported, individual users can be removed. Users cannot be edited. If you need to make changes, you should remove the existing user and import a new user with the appropriate details.

Importing a User List

Procedure

Step 1	Click the Admin tab to display the administration menus.
Step 2	In the Management menu, click Import User List to display the Import User List page.
Step 3	Click Browse then navigate to the file.
Step 4	Click Import. You will be notified if the file cannot be validated.
Step 5	If the list is correct, click Confirm. You will be notified if the import is successful. Alternatively, click Back to step 1, edit the file, and repeat the import process.

What to Do Next

When you have imported a user list, you can click Back to step 1 to import additional user lists. Alternatively, if you wait 10 seconds, you will be taken back.

Removing Users

Procedure

Step 1	Click the Admin tab to display the administration menus.
Step 2	In the Management menu, click Users to display the Manage Users page.
Step 3	Select the check box of the user to be removed.
Step 4	Click Delete Selected. You will be prompted to confirm your action.

What to Do Next

You can select multiple users to be removed. You can search for a user by entering all or part of the username, in the Search box and clicking Search. To display the full list again, click Reload list.

Book Title

Chapter Title

Results

Chapter: User Management

User Management