108In This ChapterUser Groups ..........................................................................................108Users .....................................................................................................117Authentication Settings ..........................................................................120Changing a Password ...........................................................................131User GroupsThe Dominion KX II stores an internal list of all user and group names todetermine access authorization and permissions. This information isstored internally in an encrypted format. There are several forms ofauthentication and this one is known as local authentication. All usershave to be authenticated. If the Dominion KX II is configured forLDAP/LDAPS or RADIUS, that authentication is processed first, followedby local authentication.Every Dominion KX II is delivered with three default user groups. Thesegroups cannot be deleted:User DescriptionAdmin Users that are members of this group have fulladministrative privileges. The original, factory-defaultuser is a member of this group and has the completeset of system privileges. In addition, the Admin usermust be a member of the Admin group.Unknown This is the default group for users who areauthenticated externally using LDAP/LDAPS orRADIUS or who are unknown to the system. If theexternal LDAP/LDAPS or RADIUS server does notidentify a valid user group, the Unknown group isused. In addition, any newly created user isautomatically put in this group until assigned toanother group.IndividualGroupAn individual group is essentially a “group” of one.That is, the specific user is in its own group, notaffiliated with other real groups. Individual groups canbe identified by the “@” in the Group Name. Theindividual group allows a user account to have thesame rights as a group.Up to 254 user groups can be created in the Dominion KX II.Chapter 7 User Management
