Create or Modify Login Rule Dialog

In the central user management, you create or modify a login rule.

Purpose

In this dialog, you define a login rule for a group or user. The login rule is evaluated to determine the roles with which a user is allowed to log into a model as long as these roles exist in the model.

Prerequisites

In order to call the central user management on the main license server in the administration program and use its functions, you must be logged-in to the license server as an administrator or your user must have the Manage Users right (normally as a group member).

Call

In the Groups tab in the Groups table or in the User tab in the User table, select the entry which you want to create or edit a login rule for.

Select Users>New>Login Rule (Ctrl+Shift+L) to create a login rule.
To change a login rule, select the login rule and select Users>Edit>Properties (Enter).

Structure

The dialog contains the following drop-down lists and OK and Cancel default buttons.

Managed Models check box

Switches display to rules for managed models (model versions). Drop-down lists need to be manually refreshed.
Standalone Models check box

Switches display to rules for standalone models (model in standalone repositories). Drop-down lists need to be manually refreshed.
Access

Access sets whether the rule allows or denies access to the given models.
Role

A role's name or pattern can be selected from the list of roles or directly entered. The list of roles comes from the entries in Roles tab.
Project

A project license server's name or pattern can be selected from the list or entered directly. It is identified using Name.Port. The list of project license servers comes from project license servers which are currently running and available.
Repository (only for standalone models)

A repository's name or pattern can be selected from the list of repositories or entered directly. The list of repositories comes from model servers which are currently running and available on the project license servers set.
Model

A model's name or pattern can be selected from the list of models or directly entered. The list of models comes from models which are currently running and available on the repository which matches the values set.
Version (only for managed models)

You can enter the name or pattern for identifying the version name for the rule.

Creating or Changing Login Rules

Context

You preferably create certain rules for logging-in to models for groups. All group members already possess rules via their affiliation to a group in this case.

Login rules define which roles are available when they log-in to a model as long as these roles are configured in the user management of the model.

In each case, you use a name or pattern to define which roles should be available for which project license servers, repositories, models and versions. Only the asterisk (*) is available for the formulation of patterns. You use precise specifications about project license servers, repositories, models and versions to restrict the applicability of the rule.

Attention

Please note that a newly created rule initially gives the group members unrestricted access to all models, since the asterisk (*) is the default setting for all drop-down lists.

Note

Please note that due to the rule evaluation steps, the order of rules with an overlapping applicability is decisive and that direct user rules always take priority over group rules.

How to proceed

In the Groups tab in the Groups table or in the User tab in the User table, select the entry which you want to create or edit a login rule for.
Select Users>New>Login Rule (Ctrl+Shift+L) to create a login rule.

A dialog appears.
To change a login rule, select the login rule and select Users>Edit>Properties (Enter).

A dialog appears.
To create a rule for model versions, activate the Managed Models check box.
To create a rule for models in standalone repositories, activate the Standalone Models check box.
To define a rule that allows access, select the Rule grants access entry in the Access drop-down list.
To define a rule that excludes access, select the Rule denies access entry in the Accessdrop-down list.

A sensible exclusion rule requires a corresponding, accessible enabling rule for the user in a group.
In the other drop-down lists, use a name or pattern to define which roles should be available to members of the group for which models.
Confirm the selection with OK.

You have defined a login rule. Then arrange the rules correctly in the order of the login rules.