User Groups
User accounts can be sorted into groups. Creating user groups provides the following benefits:
-
Specific access rights can be defined for a user group. These rights complement rights of each user.
-
Each group can be used when traffic and access rules are defined. This simplifies the definition process so that you will not need to define the same rule for each user.
User groups can be defined in User and Groups / Groups.
Creating a New User Group
Clicking on the Add button will open a dialog where new user groups can be created.
Step 1 group name and description:
Name
Group name (group identification).
Description
Group description. It has an informative purpose only and may contain any information or the field can be left empty.
Step 2 group members
Users can be added or removed from the group with the Add/Remove buttons. If user accounts have not been created yet, the group can be left empty and users can be added during the account definition (see chapter User Accounts).
Tip: To select more than one user hold the Ctrl or the Shift key.
Step 3 group access rights
Each group must have one of the following three types of access rights:
No access to administration
Users included in this group cannot access the WinRoute administration.
Read only access to administration
Users included in this group can access the WinRoute administration. However, they can only read the records and settings and they are not allowed to edit them.
Full access to administration
Users included in this group have full access rights for the administration.
Advanced options:
Users can override WWW content rules
User belonging to the group can customize personal Web content filtering settings independently of the global configuration (for details see chapters Content Rules a User Preferences).
User can unlock URL rules
User will be allowed to unlock Web pages with forbidden content.
Users can dial RAS connection
Users included in this group will be allowed to connect and hang up the dialup lines defined in WinRoute (with Kerio Administration Console or with WWW administration interface, see chapter Web Interface and User Authentication).
Users can connect using VPN
Members of this group can connect through WinRoute's VPN server (for details, refer to chapter VPN Server Configuration).
Users are allowed to use P2P networks
The P2P Eliminator module (detection and blocking of Peer-to-Peer networks see chapter P2P Eliminator) will not be applied to members of this group.
Group access rights are combined with user access rights. This means that current user rights are defined by actual rights of the user and by rights of all groups in which the user is included.
