Legal Disclaimer: The resource assets in this website may include abbreviated and/or legacy terminology for HPE Aruba Networking products. See www.arubanetworks.com for current and complete HPE Aruba Networking product lines and names.
Creating an Operator Profile
To create a new operator profile Characteristics assigned to a class of operators, such as the permissions granted to those operators., on the page, click the Create a new operator profile link.
The Operator Profile Editor form Interactive page in the application where users can provide or modify data. opens. This form has several sections, which are described in more detail below.
Figure 1 The Operator Profile Editor Form, Basic Properties Area
|
Field |
Description |
|---|---|
|
Name |
(Required) Name for this operator Person who uses ClearPass Guest to create guest accounts or perform system administration. ClearPass Guest operators act as sponsors for guest access. profile. Operator profile names must be unique. |
|
Description |
Brief description of or additional information about this operator profile. |
|
|
If selected, allows operators with this profile to log in. To disable the profile, unmark the Allow Operator Logins check box. If a profile is disabled, any operators with that profile will be unable to log in to the system. This can be useful when performing system maintenance tasks. |
Figure 2 The Operator Profile Editor Form, Privileges List
|
Field |
Description |
|---|---|
|
|
For each ClearPass Guest functionality area, specifies the appropriate permissions for this operator profile. The default in all cases is No Access. This means that you must select the appropriate privileges in order for the profile to work. Options include: — Default
— The form expands to include additional privileges specific to that item. Select the appropriate permission level for each additional option. For details about the available access levels for each privilege, see Operator Profile Privileges. |
Figure 3 The Operator Profile Editor Form, Access Area
|
Field |
Description |
|---|---|
|
User Roles |
If selected, each check box specifies a user databases and guest Someone who is permitted to access the enterprise network or Internet through your Network Access Server. Also, as ClearPass Guest, a configurable ClearPass module for secure guest network access management. Access permissions are controlled through an operator profile that can be integrated with an LDAP server or Active Directory login. account role Type of access being granted. ClearPass lets you define multiple roles. Such roles could include employee, guest, team member, or press. Roles are used for both guest access (user role) and operator access to ClearPass. that operators with this operator profile can access. Options include:
If one or more roles are selected, then only those roles will be available for the operator to select from when creating a new guest account. The guest account list is also filtered to show only guest accounts with these roles. If a database is selected in the list but no roles within that database are selected, then all roles defined in the database will be available. This is the default option. |
|
Operator Filter |
Specifies the default operator filtering to apply to guest accounts. This can be used to limit the types of accounts that can be viewed by operators. Options include:
|
|
User Account Filter |
Lets you create a persistent filter to apply to the user account list. For example, this can be useful in large deployments where an operator only wants to have a filtered view Page in the application that displays data but does not contain interactive fields the user can modify. Usually a table listing things like accounts or other sets of data and providing links to related actions or forms. of some accounts. To create an account filter, enter a comma-delimited list of field In a database or a user interface, a single item of information; attribute.-value pairs. Supported operators are described below in Operators Supported in Filters. |
|
Session Filter |
Lets you create a filter that only lasts for a single session Service provided by a NAS to an authorized user.. To create a session filter, enter a comma-delimited list of field-value pairs. Supported operators are described below in Operators Supported in Filters. |
|
Account Limit |
Maximum number of accounts an operator with this operator profile can create. Disabled accounts are included in the account limit. To set no limit, leave this field empty. When you create or edit an AirGroup ClearPass functionality that allows end users to register their personal mobile devices on a local network and define a group of friends or associates who are allowed to share them. Primarily designed for colleges and other institutions. AirGroup uses zero configuration networking to allow Apple mobile devices, such as the AirPrint wireless printer service and the AirPlay mirroring service, to communicate over a complex access network topology. operator, the value you enter in this field specifies the maximum number of devices an AirGroup operator with this profile can create. |
Operators Supported in Filters
When you create a session filter or a persistent user account filter, the user can enter a simple substring to match a portion of the username or any other fields that are configured for search, and may include the following operators:
|
Operator |
Meaning |
Additional Information |
|
= |
is equal to |
You can search for multiple values when using the equality (=) or inequality !=) operators. To specify multiple values, list them separated by the pipe character ( | ).
For example, specifying the filter "role_id=2|3, custom_field=Value" restricts the user accounts displayed to those with role IDs 2 and 3 (Guest and Employee), and with the field named "custom_field" set to "Value". |
|
!= |
is not equal to |
|
|
> |
is greater than |
|
|
>= |
is greater than or equal to |
|
|
< |
is less than |
|
|
<= |
is less than or equal to |
|
|
~ |
matches the regular expression |
|
|
!~ |
does not match the regular expression |
Configuring the User Interface
The fields in the area of the form determine elements of the application’s visual appearance and behavior that operators with this profile will see. The , , , and options specify the defaults to use for operators with this profile. Individual operator logins may have different settings, which will be used instead of the values specified in the operator profile. For information on specifying options at the individual operator level, see Local Operator Authentication.
Figure 4 The Operator Profile Editor Form, User Interface Area
|
Field |
Description |
|---|---|
|
Skin |
Specifies the skin A Web site’s visual appearance, or “look and feel.” It can be thought of as a container that holds the application, its layout, style sheet (font size and color for example), header and footer, and so on. to use for operators with this profile. For more information on skins, see Plugin Manager. Options include: — Indicates that the skin plugin currently marked as enabled in the Plugin Manager will be used.
|
|
Start Page |
Specifies the initial ClearPass application page to show to this operator after they log in. The Default setting option indicates that the application’s standard Home page will be the first page displayed after login. To have a different start page displayed to users with this operator profile, choose a page from the drop-down list. For example, if a profile is designed for users who do only certain tasks, you might want the application to open at the module where those tasks are performed. |
|
Language |
Specifies the default language to use for operators with this profile. Options include: — Default. This lets the application determine the operator’s language preference from their local system settings.
|
|
Time Zone |
Specifies the default time zone for operators with this profile. The Default setting indicates that the operator’s time zone will default to the system’s currently configured time zone. |
|
|
If selected, lets you override the application’s default forms and views and specify different ones to use for the operator profile. The form expands to show the forms and views that can be modified. If alternative forms or views have been created, you may use the drop-down lists to specify which ones to use. See Figure 5. |
|
Save Changes |
Saves your changes and creates the operator profile. |
Figure 5 The Operator Profile Editor Form, User Interface Area, Customization Options
Was this information helpful?
Great! Thanks for the feedback
Sorry about that! How can we improve it? Send your comments and suggestions!