114 Adding TM 3.0 Web users553-3001-230 Standard 10.01 September 2007French or German OS Administrator groupsImportant advice for localized OS — The name of the administrators user group in theFrench and German operating systems is not Administrators. These names are localizedby Microsoft in the regional operating system software. In a default French installationthe local administrators user group is “Administrateurs”. In the German version, thisuser group is "Administratoren". When installed on a French or German OS, the TM 3.0predefined administrators user group is named Administrateurs or Administratoren tomatch the OS.User group access rightsThe network administrator logs in to the TM 3.0 Administration Website and assignsaccess rights to the other user groups. By default, a member of any group other thanAdministrators does not have any access to TM 3.0 Web applications unless appropriatepermissions are specifically granted to that group.From the User Groups page, access to Web applications to a group, not to individualusers, are either granted or denied. To change the security access for individual users,their group membership can be changed. For new groups, the Administrator must assignaccess rights for Web applications before any users from that group can log in. Forinformation about setting user access, refer to “User groups” on page 116.With the exception of Administrators, a person is not placed in multiple groups. The firstgroup detected by TM 3.0 is used to determine access permissions. There is norestriction on the Administrators group. Users can belong to other groups, but if theybelong to the Administrators group, the Administrators profile overrides all otherprofiles.While assigning access permissions, be certain that the top-level application for everysub-application assigned is selected. For example, if selecting System Alarms,Equipment must also be selected. Failure to do so can result in members of the usergroup denied access to the Website.User authenticationOne of the following methods can be selected to authenticate TM 3.0 users:• Local TM 3.0 server account• Windows domain account• CND authentication