User Permissions

This part of the configuration can be found in Settings → System settings → User Permissions.

The Flowmon ADS application allows admins to limit the data that can be viewed by non-admin users. To limit the events which can be shown to a particular non-admin user, you can assign a perspective to each of these users. The user can view only the events that are defined in the perspective and the method instance configuration related to these events.

The perspectives can be defined using the simplified interface. It is sufficient to select the data feed, the IP address filter, and to assign the priorities to the event types. The selected source and filter are then assigned to each defined priority (the filter is assigned twice to each priority - once as source filter and once as target filter).

User permissions summary

• User permissions for non-admin users

  • Assigned filters

    • User can see only the filters assigned to them and cannot edit the filters.

    • Filter assigned to the user limits the content of displayed report chapters.

  • Assigned perspectives

    • User can only see perspectives assigned to them and cannot edit the perspectives.

    • User can only see the methods (and relevant events) that are defined by the perspectives assigned to them.

    • User can only see the email reports connected to perspectives assigned to them.

    • Users can only see data feeds connected to priorities in perspectives assigned to them.

    • The perspective assigned to the user limits the content of displayed report chapters.

    • A user without assigned perspectives can see all data feeds (including relevant events and overview charts).

    • A user with an assigned perspective with some priority defined as independent on the data feed can see all data feeds (including relevant overview charts but events are limited by the perspective).

• Pages hidden for non-admin users

  • Settings → System Settings → Storage settings

  • Settings → System Settings → IDS Collector

  • Settings → System Settings → General settings

  • Settings → Maintenance

  • Logs

  • Settings → System Settings → LDAP settings

  • Settings → System Settings → Custom scripts

  • Settings → System Settings → ePO settings

  • Settings → Processing → SNMP message

  • Settings → Processing → Syslog message

  • Settings → Processing → False positive

• The read-only pages for non-admin users

  • Settings → System Settings → User permissions (only the permissions assigned to that user)

  • Settings → System Settings → Named services

  • Settings → System Settings → External queries

  • Settings → System Settings → Event categories

  • Settings → Processing → Data feeds (according to the perspectives assigned to that user)

  • Settings → Processing → Filters (only filters assigned to him)

  • Settings → Processing → Methods (according to the perspectives assigned to that user)

  • Settings → Processing → Perspectives (only perspectives assigned to that user)

  • Settings → Processing → Blacklists

  • Settings → Processing → Custom patterns

• Settings that can be changed by non-admin users

  • Settings → Processing → Email notification (adding new reports for some perspective assigned to the user, viewing and editing reports owned by the user)

  • Settings → Processing → Custom scripts (adding new reports for some perspective assigned to the user, viewing and editing reports owned by the user)

  • Settings → Processing → Traffic recording (adding new captures for some perspective assigned to the user, viewing and editing captures owned by the user)

  • Settings → System Settings → User preferences

• Non-admin users permissions for Report chapters

  • User can see the following chapters if:

    • Events by priority: The perspective that is set has a non-empty intersection with the perspectives assigned to the user.

    • Event matrix: The filter and perspective that are set have a non-empty intersection with the filters and perspectives assigned to the user.

    • Events count by type: The perspective that is set has a non-empty intersection with the perspectives assigned to the user.

• General facts

  • The change of the perspective has no influence on the already existing finished events.

  • The Lock the configuration for non-admin users choice is locking the Settings → System Settings → User preferences and Settings → Processing → Custom actions.