the application. An example of this would be a helpdesk scenario where many users may not require or should not have access to features like, discovery, user permissions or, global application settings.

HP Web Jetadmin uses Windows domain identities to authenticate users and grant access to the application or to specified features. HP Web Jetadmin provides single-sign-on which means the user is authenticated by virtue of being logged into their client host. They do not have to provide their credentials again when logging into HP Web Jetadmin.

The HP Web Jetadmin Administrator Role

The HP Web Jetadmin administrator has full rights to all application settings and features. The person installing HP Web Jetadmin software must have local administrative privileges on the install-host and therefore will have initial administrative access to the software. Any identity that is a member of the local administrators group on the local host also has administrative access to the software. The identity must have local administrative privileges on the install-host and therefore will have initial administrative access to the software.

Alternate Log-in Method for User Security

HP Web Jetadmin uses the single sign-on functionality to pass the identity of the user who is currently logged into Windows on the client to the server where HP Web Jetadmin is installed. HP Web Jetadmin authenticates this identity through the local Windows users on the server or through the Windows domain identities. In some cases, the client and server might not reside on the same Windows security domain or on any Windows security domain. If HP Web Jetadmin fails to authenticate this identity for any reason, it displays an alternate log-in prompt. Users can then enter log-in credentials other than the credentials for the current Windows session on the client.

The alternate log-in prompt is useful in a variety of situations, such as the following:

●An authorized HP Web Jetadmin user needs to access HP Web Jetadmin from the desktop of an unauthorized user.

●The HP Web Jetadmin server is on a security domain. The user has a log-in identity on the security domain that has been given access rights in HP Web Jetadmin through the Users and Roles features. However, the user's desktop is not on the security domain.

User Security Task Modules

●User Security - Current Tasks and User Security - Common Tasks Task Modules

●User Security - Roles Task Module

●User Security - Users Task Module

●User Security - Active Clients Task Module

The following sections describe the task modules you can display or hide on the User Security page in the Application Management view. You can also display or hide these task modules in the corresponding functional area in HP Web Jetadmin by right-clicking anywhere on the page and selecting the task module.

NOTE: To display the Task Module docking area, click View > Task Modules > Task Module docking area. To display the Map docking area, click View > Device Modules > Map. The Map menu item is available when you have selected a group; the group does not have to have to a map associated with it. The Map module is visible if the Map menu item has been selected to show the module and if the selected group has a map associated with it.

272 Chapter 5 Application Management

ENWW