2.6 Managing Menu Lists

managing menu lists adding function groups single connect’s menu view and the rights to be assigned to the users can be managed based on user groups log in to the single connect web gui navigate to policy control > portal functions open the function group definition tab enter “function group name” and “description” select rights and module views to be assigned to the users save available function list function description aioc device group modulevisibility grants rights to view the device group module aioc device group show\ secrets grants rights to view device secrets aioc discovery discover device grants rights to discover and add new devices aioc discovery manage operationmode grants rights to manage devices in operation mode aioc discovery manage unassigned grants rights to manage devices in unassigned device groups aioc element type modulevisibility grants rights to view the element type module aioc help manager modulevisibility grants rights to view the help manager module aioc platform activity logs modulevisibility grants rights to view the activity logs module aioc platform sysconfig modulevisibility grants rights to view the system config management module aioc users approve all user grants rights to approve new users aioc users approve finalapproval grants rights for final new user approval aioc users manage user grants rights to manage users aioc users manage user group grants rights to manage user groups netright admin datasource manager modulevisibility grants rights to view the datasource manager module netright components modulevisibility grants rights to view the components module netright config modulevisibility grants rights to view the configuration module netright discovery modulevisibility grants rights to view the discovery module netright jobs modulevisibility grants rights to view the job scheduler module netright log modulevisibility grants rights to view the logs module netright mailsender modulevisibility grants rights to view the mail sender module netright memory modulevisibility grants rights to view the memory manager module netright nsso modulevisibility grants rights to view the ssh/telnet proxy module netright realms modulevisibility grants rights to view the portal functions module netright sql modulevisibility grants rights to view the sql query module netright user approval modulevisibility grants rights to view the user approval module netright user auth log modulevisibility grants rights to view the user authentication logs module netright users modulevisibility grants rights to view the user management module sc aaa remote db modulevisibility grants rights to view the remote database module sc devops modulevisibility grants rights to view the devops module sc log search network admin grants rights to view all logs for the devices included the user’s device group realms sc log search skip realm grants rights to view all logs sc secret data vault admin grants rights to manage data vault accounts sc secret data vault auditor grants rights to list all records on secret data vault sc secret data vault modulevisibility grants rights to view the data vault module sc secret data vault viewer grants rights to view data vault accounts single connect aapm modulevisibility grants rights to view the aapm module single connect cli modulevisibility grants rights to view the ssh/telnet client module single connect dasboard modulevisibility grants rights to view the dashboard module single connect freeradius acc modulevisibility grants rights to view the radius accounting log module single connect freeradius rest modulevisibility grants rights to view the radius rest module single connect httpproxy ui modulevisibility grants rights to view the http proxy module single connect policy enforcement modulevisibility grants rights to view the policy module single connect rdp client modulevisibility grants rights to view the rdp/vnc client module single connect remote desktop modulevisibility grants rights to view the rdp/vnc proxy module single connect sapm admin grants rights to manage all sapm accounts and view all logs single connect sapm approval requirement grants rights to view password after approval single connect sapm auditor grants rights to list all sapm accounts without seeing details single connect sapm historical password viewer grants rights to view old passwords single connect sapm log viewer grants rights to view all logs in the sapm management menu single connect sapm modulevisibility grants rights to view the sapm module single connect sapm network admin grants rights to manage and view all accounts of devices defined to a user single connect sapm network auditor grants rights to list all accounts of devices defined in user device group realms without seeing details single connect sapm secondlevel admin grants rights to give second level approval for all sapm accounts and view all logs single connect sapm approval requirement grants rights to view password after two level approval single connect sapm secondlevel network admin grants rights to give second level approval for all accounts of devices defined in user device group realms single connect session active logs modulevisibility grants rights to view the session activity logs module single connect sessionmanager ui modulevisibility grants rights to view the session manager module single connect setup wizard modulevisibility grants rights to view the setup wizard module single connect sql proxy modulevisibility grants rights to view the sql proxy module single connect tacacs acc modulevisibility grants rights to view the tacacs+ accounting logs module single connect twofactor acc modulevisibility grants rights to view the two factor authentication activation module single connect user logs modulevisibility grants rights to view user logs module single connect windows audit report modulevisibility grants rights to view the windows audit report module tfaprovisioningviewer grants rights to view the two factor authentication provisioning screen adding function realm log in to the single connect web gui enter “realm name” and “definition” select “function groups” and select “user groups” to be assigned save