User Group Identification

User group identification applies to external mode.

NNMi determines the user groups for an NNMi user as follows:

  1. NNMi compares the values of the external names of all user groups configured in the NNMi console with the names of the directory service groups.
  2. For any user group match, NNMi then determines whether the NNMi user is a member of that group in the directory service.

In the NNMi console, short text strings identify the unique names of the predefined NNMi user groups that grant NNMi console access. These text strings are also required by the defaultRole and userRoleFilterList parameters in the LDAP configuration file. The following table maps the unique names of these groups to their display names.

NNMi User Group Name Mappings

NNMi Role Name in the
NNMi Console

User Group Unique Name and Text String in NNMi Configuration Files

Administrator

admin

Global Operators

globalops

Operator Level 2

level2

Operator Level 1

level1

Guest

guest

Web Service Client

client

Note The NNMi Global Operators User Group (globalops) grants access to all topology objects only. A user must be assigned to one of the other User Groups (admin, level2, level1, or guest) to access the NNMi console.

The administrator should not map the globalops User Group to any security group because this User Group is, by default, mapped to all security groups.