PRTG Manual: System Administration—User Groups

To open system administration, select Setup | System Administration from main menu. Click on the tabs to change the different settings.

System Administration Tabs

System Administration Tabs

You can define the following aspects of your PRTG system setup:

PRTG administrator users can change existing user groups or add new ones, and define the users that are member of a certain group.

All the security settings as well as further rights management are conducted via the user groups. This means that group membership controls what a user may do and which objects he/she sees when logged in. The actual rights for each object can be defined in an object's settings. There, you can define different rights for each user group.

  • To change a user group's settings, select it from the list by clicking on the group name.
  • To add a new user group, click on the Add User Group button. The options are the same as for existing users (with slight differences).
  • To batch-add several users at once in a simple way, please click the Add Multiple Users button. In the dialog box appearing, select an existing user group from the drop down menu and enter or paste a list of email addresses. They can be separated by space, comma, semicolon, or a new line. Click the Add button to confirm. For each address, PRTG will create a new local user account within the selected user group, carrying the email address as value for Login Name, Username, and Email Address. A new password will be generated automatically and sent to the email address.
  • By default, there aren't any rights set for a newly created PRTG user group. Initially, users in this group will not see any objects in the PRTG device tree. Please edit your device tree object's settings and set access rights for your newly created user group in the Inherit Access Rights section. Note: The easiest way is to set these rights in the Root Group Settings.

User Groups Settings

Note: This documentation refers to the PRTG System Administrator user accessing the Ajax interface on a master node. For other user accounts, interfaces, or nodes, not all of the options might be available as described. When using a cluster installation, failover nodes are read-only by default.

User Group Settings

User Group Name

Enter a name for the user group.

Administrative Rights

Define if the members of this group will be PRTG administrators. If you enable this option, all members of this group will have full access to all monitoring objects, maps, reports, user accounts and user groups, and they can change the PRTG monitoring configuration. Choose between:

  • Yes: Give full PRTG administrator rights to all members of this group.
  • No: Do not make members of this group administrators. Access to monitoring objects for users that are member of this group will be controlled by the Access Rights settings defined in the Object Settings of Probes, Groups, Devices, or Sensors.

Note: This option is especially useful in combination with the Active Directory option below.

Use Active Directory

Define if this PRTG user group will be connected to a group in your active directory. Choose between:

  • Yes: Connect this group to an AD group. Choose below. For detailed information, please see Active Directory Integration.
  • No: Do not use Active Directory integration for this group, but choose local user accounts instead.

Active Directory Group

If a valid Active Directory Domain is set in the System Administration—System and Website settings and Active Directory integration is enabled above, a drop down menu will appear, showing the groups in your Active Directory. Choose the group whose members will be able to log in to PRTG using their Active Directory domain credentials. All of those AD users will be in the security context of the PRTG group you're about to create/edit. For detailed information, please see Active Directory Integration.

If your Active Directory contains more than 99 entries for one of the categories "Local", "Global", or "Universal" group, PRTG will display an input field instead of a drop down menu. This is done due to performance reasons. In the input field, you can enter the group name only. PRTG will then add the prefix automatically.

New User Type

If Active Directory integration is enabled above, define the default rights for all new users in this user group. If a user logs in for the first time using Active Directory credentials, PRTG will automatically create a new local user account for this user, applying the user type defined here. Choose between:

  • Read/Write User: The user may change settings.
  • Read Only User: The user may not edit any settings. This is a good choice for public or semi-public logins.

Members

Members

This setting is available only if Active Directory integration is disabled above. Define which local user accounts will be a member of this group. To add a user account from the list, add a check mark in front of the user name. The user accounts available depend on your setup.

Primary Users

User List

Shows a list of all user accounts with this group set as primary group. This is shown for information purposes only. You can change it in a user account's settings.

Comments

In the Comments tab you can enter free text for each object. This can be used for documentation purposes or to leave information for other users.

History

In the History tab all changes in the settings of an object are logged with a timestamp, the PRTG user which conducted the change, and a message. The history log keeps the last 100 entries.

Click on the Continue button to store your settings. If you change tabs or use the main menu, all changes to the settings will be lost!

 

Setup—Topics

Others

There are some settings that have to be made in the System Administration Tools, available as native Windows applications. For more details, please see sections:

Continue

Keywords: Configure,Configure User Group