Users & Groups

Managing users and groups in Data Mover Smart requires Administrator privileges. Users can be internal or external and can be created locally in Data Mover Smart or imported via LDAP. Groups help organize users and assign permissions efficiently.

All users listed in the Users & Groups section can connect to Data Mover Smart with their username and password.

Local users and groups

Local users and groups are created internally within Data Mover Smart using the Users & Groups menu.

Local users and groups can be classified as:

• Internal: these users have access to the Data Mover Smart dashboard. They are assigned specific permissions and roles that define their capabilities within the system.

• External: these users can connect to a VFS of a Data Mover Smart server, using a specific protocol. These users do not have direct access to the dashboard. Permissions and roles cannot be assigned to external users.

Creating local users

To create a new internal or external user:

1. Go to the Users & Groups section and click New User.

2. By default, users are Internal. To create an external user, select the External button.

3. Fill in the following fields:

   • Username (required): Unique login name.

   • Password (required): Login password.

   • First Name / Last Name (optional).

   • Email (optional).

4. If the user is internal, you can assign roles by clicking the + next to Roles. This method speeds up user setup and ensures that permissions are assigned consistently across all users belonging to the same role. To create new Roles, see the Roles page.

5. Assign groups by clicking the + next to Groups.

6. If the user is internal, in the Permissions panel you can select the permissions to be assigned to the user. If you used the Roles feature, permissions are already enabled but you can select more if necessary. For clarity, the origin of each permission (role or group) is shown in brackets. When creating a new internal user, all permissions are listed, and you can filter by typing part of the name in the field with the lens at the top. You can also type the category (e.g. USER) to filter permissions. You can also see only already assigned permissions by clicking on the icon. The icon becomes a closed eye and to list all permissions again, you must click on it.

7. Click SAVE to confirm.

Creating local groups

To create a new local group:

1. Go to Users & Groups and click the Groups tab.

2. Click New Group.

3. By default, groups are Internal. To create an external group, select the External button.

4. Enter a unique group name.

5. Add users via the + next to Users.

6. If the group is internal, in the Permissions panel you can select the permissions you want to assign to the group. All permissions are listed, and you can filter by typing part of the name in the field with the lens at the top. You can also type the category (e.g. GROUP) to filter permissions. You can also see only already assigned permissions by clicking on the icon. The icon becomes a closed eye and to list all permissions again, you must click on it. The permissions assigned to the group will be added to the permissions assigned to the user.

7. Click SAVE to confirm. The group will be enabled by default.

Permissions assigned to a group are added to those assigned to individual users.

LDAP users and groups

In Data Mover Smart, LDAP users are internal users and are automatically created or updated when they log in to Data Mover Smart via LDAP. LDAP user attributes (e.g., email, name) are imported and refreshed every time the user logs in to Data Mover Smart.

The password of the LDAP user is never stored in Data Mover Smart.

LDAP groups are imported as internal groups. They do not have permissions assigned by default but the administrator can go to Users & Groups and click the Groups tab to enable each group, grant permissions and associate them to users. LDAP group attributes are imported from LDAP and refreshed when updated in LDAP.

When new LDAP users log in to Data Mover Smart for the first time, their account and all related data will be loaded into Data Mover Smart. However, these users will not yet have access to the product. A warning message will appear, informing them that administrator authorization is required. The administrator must then navigate to Users & Groups, locate each user, and grant them the appropriate permissions.

Administrator capabilities with LDAP

The administrator can view the LDAP users who have logged into Data Mover Smart and the groups imported from LDAP.

The following actions can be executed on LDAP users:

• Grant or remove permissions.

• Assign or remove local groups, LDAP groups and Data Mover Smart roles.

Once an administrator assigns permissions to an LDAP user, they will operate with the granted permissions at their next login.

The following actions can be executed on LDAP groups:

• Enable or disable the group.

• Assign or remove local users and LDAP users.

• Grant or remove permissions.

Editing and deleting users and groups

To edit a user or group (local or LDAP), click the user or group row and the Edit window will open. Apply the modifications needed and click the Save button.

To delete a user or group (local or LDAP), click the three dots next to their row and select Delete.

The Admin user and the Guest user cannot be deleted or modified.

Filtering Users and Groups

Use the Filters panel to filter users by:

• First name / Last name

• Username

• Email

• Origin (Local or LDAP)

Use the Search Groups field to filter groups.