User Guide

Bridge GUI Guide: Administrative Access
31
2.2.2.1 Administrator User Names
NOTE: In Ad-
vanced View, the
Username for any ac-
count listed in
Adminis-
trator Settings
links to a
Detailed Statistics dialog
for the account. Refer to
Section 5.2 for more in-
formation.
At the time a new administrative account is created, you must
provide a
Username. Once established, the Username
associated with an administrative account cannot be changed.
Administrator user names must be unique on the Bridge. They
are case sensitive, can be from 1 to 32 characters long, and
can include spaces and any of the symbols in the set:
~ ! @ #
$ % ^ & *( ) _ - + = { } [ ] | \ : ; < > , . ? /
(excludes double and single quotation marks).
An administrative account with a
Learned state of Yes acquires
the
Username configured for the associated administrator in the
third-party or Fortress
RADIUS server (refer to Section 2.2.2.8).
You can create new administrative accounts only in Advanced
View.
2.2.2.2 Account Administrative State
Preconfigured and newly added administrative accounts are
Enabled by default. If you change an account’s Administrative
State to Disabled, it will no longer be usable. If the associated
administrator attempts to log on to a
Disabled account, the
Logon to Fortress Security System screen will be returned with
an error message. If you re-enable the account, the
administrator will be allowed to log on normally.
At least one enabled
Administrator-level account must be
present on the Bridge at all times. You will not therefore be
allowed to disable an
Administrator-level account if it is the only
such account on the Bridge.
You can create new administrative accounts and edit them only
in Advanced View, but you can change the
Admin State of
preconfigured accounts in both views.
2.2.2.3 Administrative Role
An administrative account can be configured for one of three
possible administrative roles:
NOTE: Log Viewer
and Maintenance
administrators can
change their own pass-
words, provided their
account passwords are
not locked (refer to Sec-
tion 2.2.2.7).
 Administrator accounts provide unrestricted access to the
Bridge.
Administrator-level users can configure all functions
and view all system and configuration information on the
Bridge.
 Maintenance accounts provide view-only access to
complete system and configuration information but no
reconfiguration access. A maintenance administrator’s
execution privileges are confined to using the network
diagnostic tools on
Maintain -> Network, resetting Secure
Clients and controller device sessions, rebooting the
Bridge, and generating a support package.
 Log Viewer accounts provide view-only access to high-level
system health indicators and any log messages unrelated