Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Network Node Manager i Software10.30

Administer > Configure Security > Using the Security Wizard View > Configure Security Example (Divide Node Access Between Two or More User Groups)

Configure Security Example (Divide Node Access Between Two or More User Groups)

This example uses NNMi's security configuration to divide the responsibility for network monitoring based on the following locations:

Chicago
Detroit

Each location includes an NNMi Level 1 Operator (with more limited access privileges than Level 2 Operators) and an NNMi Level 2 Operator. Tina, the NNMi Administrator, handles both locations. Kevin is a backup for both Chicago and Detroit and must access the nodes in both Chicago and Detroit.

The following diagram illustrates the security requirements:

The following table lists the NNMi console (NNMi User GroupNNMi User Groups are those User Groups provided by NNMi. Users cannot access the NNMi console until their User Account is mapped to at least one of the following NNMi User Groups: NNMi Administrators, NNMi Level 2 Operators, NNMi Level 1 Operators (with more limited access privileges than Level 2 Operators), and NNMi Guest Users) and node access requirements (User Group, Object Access Privilege and Security Group) for each location.

Note You can place all operators into the NNMi Level 2 Operators if you want all operators to see all menu options, but only have the ability to run them based on their Object Access Privilege.

Example Security Configuration
User Accounts	NNMi User Groups	User Groups	Object Access Privileges	Security Groups
Tina	NNMi Administrator	Not Applicable. The NNMi Administrator can access all nodes.	Not Applicable. The NNMi Administrator has Administrator privileges to all nodes.	Not Applicable. The NNMi Administrator can access all nodes.
Kevin	NNMi Level 2 Operators	Chicago Level 2 Detroit Level 2	Object Operator Level 2	Chicago Nodes, Detroit Nodes
Lisa	NNMi Level 2 Operators	Chicago Level 2	Object Operator Level 2	Chicago Nodes
Taylor	NNMi Level 1 Operators	Chicago Level 1	Object Operator Level 1	Chicago Nodes
Mary	NNMi Level 2 Operators	Detroit Level 2	Object Operator Level 2	Detroit Nodes
Tom	NNMi Level 1 Operators	Detroit Level 1	Object Operator Level 1	Detroit Nodes

To set up security for the Chicago and Detroit locations follow these procedures:

Remove the Default Security Group Mapping to NNMi User Groups: NNMi Level 1 Operators, NNMi Level 2 Operators, and NNMi Guest

Note The NNMi User Groups are provided for those NNMi administrators who are not concerned with Security configuration. After you remove these Security Group Mappings, the NNMi User Groups provide access to the NNMi console only rather than to the NNMi console and to all nodes.

Create the User Accounts. (See the Example Security Configuration table.)
Create the Additional User Groups required for the Chicago and Detroit Security Groups (Chicago Level 2, Chicago Level 1, Detroit Level 2, Detroit Level 1). (See the Example Security Configuration table.)
Map User Accounts to NNMi User Groups. (See the Example Security Configuration table.)
Create the Security Groups for each location.
Map each Security Group to the new User Groups. (See the Example Security Configuration table.)

Assign the nodes to the appropriate Security Group.
View a summary of your configuration changes

Create User Accounts

In the Configuration workspace, select Security Wizard
From the Security Wizard main page, select the Map User Accounts and User Groups option.
Navigate to the User Accounts table.
Click New.
In the Create User Account dialog box, enter the following:
1. Name: Enter the user name Tina.
2. Password: Enter the Password value Tina. The Password value can be any amount of alpha-numeric characters, punctuation, spaces, and underline characters.
3. Directory Service Account: Do not enable this option.
  
  = User name and password are stored in the NNMi database. See NNMi Configuration Settings to Control NNMi Access.
4. Click Add.
5. Repeat to add each User Account. (See the Example Security Configuration table.)
6. When you finish creating User Accounts, in the Create User Account dialog box, click Close.
Continue or, click the Save and Close button to save your security configuration.

Note NNMi does not save any configuration changes until you click Save and Close to save your security configuration.

Create Additional User Groups

From the Security Wizard main page, select the Map User Accounts and User Groups option
Navigate to the User Groups table.
Click New.
In the Create User Group dialog box, enter the following:
1. Name: Enter ChicagoLevel2. The name can be a maximum of 40 alpha-numeric characters. Spaces are not permitted.
2. Display Name: Enter Chicago Level 2. The Display Name is displayed in the NNMi console to identify this User Group. Enter a maximum of 50 characters. Alpha-numeric, spaces, and special characters (~ ! @ # $ % ^ & * ( ) _+ -) are permitted.
3. Directory Service Name: Optional. When Lightweight Directory Access Protocol (LDAP) define this User Group, enter the group’s Distinguished Name. See the following topics:
  - Lightweight Directory Access Protocol (LDAP) to Control NNMi Access.
  - X.509 Certificates to Control NNMi Access
4. Description: Type a maximum of 2048 characters to describe this User Group. Alpha-numeric, spaces, and special characters (~ ! @ # $ % ^ & * ( ) _+ -) are permitted.
5. Click Add.
6. Repeat to add each User Group. (See the Example Security Configuration table.)
7. When you finish creating User Groups, in the Create User Group dialog box, click Close.
Continue or, click the Save and Close button to save your security configuration.

Note NNMi does not save any configuration changes until you click Save and Close to save your security configuration.

Create Security Groups

From the Security Wizard main page, select the Map User Groups and Security Groups option
Navigate to the Security Groups table.
Click New.
In the Create Security Group dialog box, enter the following:
1. Name: Enter Chicago Nodes. The name must be a maximum of 255 characters. Alpha-numeric, spaces, and special characters (~ ! @ # $ % ^ & * ( ) _+ -) are permitted.
2. Description: Type a maximum of 2048 characters. Alpha-numeric, spaces, and special characters (~ ! @ # $ % ^ & * ( ) _+ -) are permitted.
3. Click Add.
4. Repeat to add the Detroit Nodes.
When you finish creating Security Groups, in the Create Security Group dialog box, click Close.
Continue or, click the Save and Close button to save your security configuration.

Note NNMi does not save any configuration changes until you click Save and Close to save your security configuration.

Map Security Groups to User Groups

From the Security Wizard main page, select the Map User Groups and Security Groups option.
Select Chicago Nodes in the Security Groups table.
In the Security Group Mappings drop-down selection box, select Object Operator Level 2.
In the User Groups table, click the right arrow in the ChicagoLevel2 row.

The Security Group and User Group names appear in the Security Group Mapping table.
Repeat steps 2 through 4 to map the following User Groups and Security Groups:

Tip Be sure to select the appropriate Object Access Privilege in the drop-down selection box under Security Group Mappings.

ChicagoLevel1 User Group to the Chicago Nodes

DetroitLevel1 User Group to the Detroit Nodes

DetroitLevel2 User Group to the Detroit Nodes
Continue or, click the Save and Close button to save your security configuration.

Note NNMi does not save any configuration changes until you click Save and Close to save your security configuration.

Your Security Group to User Group mappings should look similar to the following:

Assign the Nodes to the Appropriate Security Group

From the Security Wizard main page, select the Assign Nodes to Security Groups option.
Select a row in the Security Groups table.
In the Available Nodes table, do one of the following:
1. Select a Node Group in the Node Group filter drop-down list to specify the nodes to be assigned to the Security Group.
2. User Ctrl-Click to select each node you want to assign to the selected Security Group.
Click to specify that you want to assign the selected nodes to the Security Group.

The Nodes to be Assigned to Selected Group table displays the list of nodes to be assigned to the selected Security Group.

Note Out-of-box, NNMi assigns all Nodes the Default Security Group. See Methods for Assigning Nodes to Security Groups.
Repeat steps 2 through 4 to assign nodes to a selected Security Group.
Continue or, click the Save and Close button to save your security configuration.

Note NNMi does not save any configuration changes until you click Save and Close to save your security configuration.

Send Help Center feedback