|
|
User account management
Genic DataManager allows for a ‘single sign-on’ authentication method, which will use the user id and domain of the current logged in user as authentication credentials. The credentials will be passed to the Genic DataManager security component in the format USERID@DOMAIN and used to manage the access rights for that user.
Additionally, users can be authenticated using user name and encrypted password server authentication.
Entitlement – access control
The access control is segregated into resource level and workgroup level.
A resource consists of multiple models or actions or groups that were given read/write access. These resources are then mapped to different workgroup. Each workgroup may be mapped to multiple resources. GDM enables the administrator to assign individual users to different work groups. Users who belonged to the workgroup will be able to access any of models, actions or groups residing in that resource.
Auditing and Security Reporting
User Reports
The following reports exist for users:
- User List Displays the full list of users (Login, Name, Email, Company)
- User Rights Displays the full set of rights on each resource for a particular user
Workgroup Reports
The following reports exist for workgroups:
- Workgroup List Displays the full list of workgroups (Name, Comments)
- User List Displays the list of users that belong to this workgroup
- Resource List Displays the list of resources that this workgroup handles
Resource Group Reports
The following reports exist for resource groups:
- Resource Group List Displays the full list of resource groups (Name, Comments, Rights)
- User List Displays the list of users for a particular resource group (Login, Name, Rights)
Audit Reports
This section details the audit reports that are available in the system:
Security Audit Report
This report details all changes made to security components with the following filter parameters:
- From Date The start date for changes
- To Date The end date for changes
- User The user who made the change
- Only Users List only changes to users
- Only Workgroups List only changes to workgroups
- Only Resource Groups List only changes to resource groups
Meta Data Report
This report details all changes made to meta-data with the following filter parameters:
- From Date The start date for changes
- To Date The end date for changes
- User The user who made the change
- Only Templates List only changes to templates
- Only Types List only changes made to types (Model, Data, Identity, Event and Group)
- Only Conversions List only changes made to conversions
- Only Code List only changes made to code
Model Report
This report details all model actions with the following filter parameters:
- From Date The start date for changes
- To Date The end date for changes
- User The user who made the change
- URI List only changes made to a URI or category e.g. model://PLATTS/*
Group Report
This report details all group actions with the following filter parameters:
- From Date The start date for reads
- To Date The end date for reads
- User The user who made the read
- URI List only reads made to a URI or category e.g. group://AGG/*
Audit Reporting Logs
GDM Audit reporting logs 4 types of audits exportable in multiple formats: HTML, XML, XLS, PDF:
- Security auditing records all security component changes such as adding and removing user access to GDM
- Meta auditing records all changes made to meta-data such as adding a new template
- Model auditing audits both reads and writes to models and profiles (Time series)
- Groups auditing records all reads and writes made such as adding a model to a group or removing from a group
|
|