Crestron Electronics CP4N - User Group Rights

Product Manual — Doc. 8559B 4-Series™ Control Systems • 161
Add User to Group
To add a local or an Active Directory user to a local group, issue the addusertogroup command.
l
Syntax: addusertogroup -n:username -g:groupname
o
-n: - Specifies the name of the local or Active Directory user
o
-g: - Specifies the name of the local group
l
Example: addusertogroup -n:jsmith1 -g:CresProgs
Local users are created on the control system without any access rights. Adding a user to a local
group grants the user the access level assigned to the group.
NOTE: The control system cannot create or remove a user from the Active Directory service,
but it can grant an access level to an existing Active Directory user. This may be
accomplished either by adding the Active Directory user to a local group on the control
system or by adding the Active Directory group(s) of which the user is a member to the
control system.
Remove User from Group
To remove a local or an Active Directory user from a local group, issue the
removeuserfromgroup command.
l
Syntax: removeuserfromgroup -n:username -g:groupname
o
-n: - Specifies the name of the local or Active Directory user
o
-g: - Specifies the name of the local group
l
Example: removeuserfromgroup -n:jsmith1 -g:CresProgs
User Group Rights
The control system architecture supports multiple user groups (either locally or from the Active
Directory service). Any user can be a member of multiple groups. Both local and Active Directory
groups can be given the following rights based on the chosen access level. The numbers
associated with these rights correspond with the Default Rights of Local Groups (on the next
page).
1. Logging into console and having access to read-only system status/setting commands
2. Using a Web XPanel interface
3. Logging in to connect to CIP/gateway connections
4. Inputting administrator commands, such as ones dealing with user accounts and changing
system settings
5. Inputting programmer commands, such as ones dealing with loading programs and
loading files
6. Inputting operator commands, such as ones that restart programs
Out of the box, the device ships with the following local user groups with the associated rights: