If you are a current customer of SolarWinds IP Address Manager (IPAM) or are simply looking for answers to your questions on how to perform user delegation, you're in the right place. This slideshare helps you to understand what is User Delegation? How do I modify user role definitions? How do I set up access controls and user permissions? How do I set up account limitations and how do I add new user accounts?
How-To: Perform User Delegation with SolarWinds IP Address Manager
1. How To Perform User Delegation
in SolarWinds IP Address
Manager
Simple Steps to Customize Access
Controls & Assign User Permissions
How To Perform User Delegation in
SolarWinds IP Address Manager
1
2. Agenda
» What is User Delegation?
» Modifying User Role Definitions
» Access Controls & User Permissions in IPAM
» Setting Account Limitations
» Adding New User Accounts
How To Perform User Delegation in
SolarWinds IP Address Manager
2
3. What is User Delegation?
» SolarWinds IP Address Manager (IPAM) allows you to define and use role
definitions to restrict user access to maintain security without limiting
your ability to delegate required network management activities.
» You can define access roles per subnet, group, supernet, DHCP scope or
even individual IP addresses.
» User delegation defines the visibility of subnets and supernets and the
choice of actions that can be performed.
» SolarWinds IPAM tool has various levels of access privileges to be
assigned to different users based on their operational limitations and
access controls on IP address management within the organization.
How To Perform User Delegation in
SolarWinds IP Address Manager
3
4. Modifying User Role Definitions
» Click Settings on the right top corner of the IPAM web
console
» This will open the Orion Website
Administration page. Click on
Manage Accounts under the
Accounts section.
» The Manage Accounts page will
show all the IPAM user logins that
are created within your organization.
Now, select the login for which you
want to change access control and
click Edit.
Editing Access Control for User Login in SolarWinds IPAM
How To Perform User Delegation in
SolarWinds IP Address Manager
4
5. Modifying User Role Definitions (contd.)
» On the Edit Account page, expand the IP Address Manager Settings which will give
you the option to select from various IPAM Roles & Permissions for the selected user
login.
» If you want to customize the settings for any of the user login levels, select Custom
and click Edit
Editing IPAM Roles and Permissions in SolarWinds IPAM
How To Perform User Delegation in
SolarWinds IP Address Manager
5
6. Modifying User Role Definitions (contd.)
» On the Edit Custom IPAM Roles & Permissions page you can modify the user control for each and
every subnet and DHCP scope.
» You can just select a subnet and
click from any of the four
options below to limit the
subnet or DHCP scope to only
the require user login.
1. Power User – Read/Write and
Initiate Scans
2. Operator – Rea/Write Access
3. Read Only – Read Only Access
4. Hide Access – Restrict All Access
» This will limit the subnet and
DHCP scopes to be accessible to
and controllable by only the
selected user logins.
» After making the role Modifying User Login Roles and Permissions in SolarWinds IPAM
definitions, click Submit.
How To Perform User Delegation in
SolarWinds IP Address Manager
6
7. Access Controls & User Permissions in IPAM
Read Only Operator
• Read only access to DHCP Servers, Scopes, Leases, Reservations and DNS Operators maintain the same rights granted to Read-Only users with the
Servers, Zones, Records Hide addition of the following abilities:
• All IPAM web console resources, including search and Top XX resources not •Addition and deletion of IP address ranges from portions of the network made
previously limited by Orion account limitations. available by the site administrator.
• All IP address and network component properties and custom fields on the •Subnet status selection on the Manage Subnets and IP Addresses page.
Manage Subnets and IP Addresses page.
•IP address property and custom field management, including the ability to edit
• The Chart View on the Manage Subnets and IP Addresses page. IP address properties on portions of the network made available by the site
administrator.
Note: This role restricts all access, including access to all DHCP Management and
DNS Monitoring.
Power User Admin
Power Users maintain the same rights granted to Operators with the addition of Administrators are granted the same access to IPAM that is granted to Power
the following abilities: Users with the following added privileges:
•Drag-and-drop reorganization of network components in the left pane of the •SNMP credentials management.
Manage Subnets and IP Addresses view.
•Custom fields management.
•Supernet and group properties management, including the ability to edit
•Subnet scan settings configuration.
supernet and group properties and custom fields on portions of the network
made available by the site administrator. •Can directly configure custom roles in the “Subnet Edit” pop-up dialog
•Read/write access and can initiate scans to all subnets, manage credentials,
custom fields, and IPAM settings
•Have full access to DHCP management & DNS monitoring.
Hide Custom
• Restrict ALL access. This role is defined on a per subnet basis. DHCP and DNS access will depend
• Restrict Access to all DHCP management & DNS Monitoring. upon the Global account setting for those nodes.
How To Perform User Delegation in
SolarWinds IP Address Manager
7
8. Setting Account Limitations
» SolarWinds IP Address Manager allows you to define limitations to limit the network
devices each User Account can view.
» On the Edit Account page, click
on the Add Limitation button.
» This will open the Select
Limitation Type page where
you can choose and
customize the account
limitation settings as
required.
» For example you could create
a limitation for an account that
allows viewing only a single
network device
or viewing the devices from a
specific manufacturer
or those from a specific location
or group.
8
9. Adding New User Accounts
» If you want to add a new User Account, on the Manage Accounts page, click the Add
New Account button, and select the type of account to be created enter account
information and save settings.
Adding a New User Account in SolarWinds IPAM
How To Perform User Delegation in
SolarWinds IP Address Manager
9
10. Key Features & Benefits of SolarWinds IPAM
» Powerful, centralized DHCP management for Microsoft® DHCP services, monitoring for
Microsoft DNS, and monitoring for Cisco® DHCP servers.
» Intuitive web interface for simple, click-of-a-button management & IP address planning
» Automated IP address scanning customizable to your needs
» Global search feature to track down any IP in seconds along with historical address tracking
» Real-time top 10 lists for “at-a-glance” visibility into your IP space
» Role-based access control and detailed event recording to track who made what change
» Quick and easy installation for deployment in under an hour
Centralized IP Address Management Historical IP Address Tracking
How To Perform User Delegation in
SolarWinds IP Address Manager
10
11. Helpful Resources
We invite you to learn more about SolarWinds IP Address Manager
Fre
e
Tool
How To Perform User Delegation in --- Click any of the links above ---
SolarWinds IP Address Manager
11
12. Thank You!
How To Perform User Delegation in
SolarWinds IP Address Manager
12