User Group Properties

the following parameters can be defined for user groups parameter definition admingroup if set as true, all users belonging to the user group have admin rights allowconsoleaccess if set as true, console access to aaa and tacacs+ devices is enabled for the user group allowdirectaccess if set as true , direct access to aaa and tacacs+ devices through single connect is enabled for the user group allowsftpinsshdevices if set as true , both sftp and ssh access are available in devices that have ssh access protocol for the user group the default value is false approvalrequiredforconnection if set as true , managerial approval applies for ssh/rdp/sftp connections for all users belonging to that user group the group manager needs to approve for other users to establish ssh/rdp/sftp connections autonomousgroup if set as true , this group’s users may be excluded in radius logs in order to avoid creating a log flood these users’ passwords never expire externaldirectorysources this value is pulled from the sc integration ldap source name n parameter defined in the system config man it specifies which ldap source the user group belongs to passwordttlmonths defines the maximum time allowed for the use of passwords for users in the configured user group when the users' passwords reach their ttl, they are forced to change it the next time they log in sc command log disabled enable/disable viewing command logs for users who are able to view session logs the default value is false if set as true , the users in the related user group are unable to view command logs sc keylog log disabled enable/disable viewing of key logs generated during rdp sessions the default value is false if set as true , the users in the related user group are unable to view key logs sc ocr log disabled enable/disable viewing ocr logs generated during rdp sessions the default value is false if set as true , the users in the related user group are unable to view ocr logs sc session video record disabled enable/disable viewing session video records for users who are able to see session logs the default value is false if the parameter is set as true , the users in the related user group are unable to view session video records