Define or Remove Users or Groups

You can define, edit, and remove users and user groups for role-based administration in WatchGuard System Manager (WSM) and WatchGuard Server Center. You can choose how a user or group is authenticated and define the password for a local user.

When you edit a user or group, you can change all the details for the user or group, but you cannot change the user or group name. Instead, you must remove the existing user or group and then add a new user or group with the new name.

• To use an Active Directory server to authenticate a user or group, before you define users or groups, you must set up Active Directory authentication. For more information, go to Configure Active Directory Authentication for the Management Server.
• To use a RADIUS server to authenticate a user or group, before you define users or groups, you must set up RADIUS authentication. For more information, go to Configure RADIUS Authentication for the Management Server.

Use WatchGuard System Manager to Configure Users or Groups

1. Connect to Your Management Server with WSM.
2. Select File > Manage Users.
   The Manage Users dialog box appears.

3. To add a new user, click Add.
   To edit details for an existing user, select a user from the list and click Edit.
   The User Properties dialog box appears.

4. On the User or Group tab, in the Name text box, type a name for the user or group.
5. Select a user type:
6. To define a new user to be authenticated locally, select Local User.
   In the Password text box, type a new password. In the Confirm Password text box, type the password again.
7. To define a new user to be authenticated to an Active Directory or RADIUS server, select External User. This is the principal name for the user in Active Directory or the user name on the RADIUS server.
8. To define a new group to be authenticated to an Active Directory or RADIUS server, select External Group. This is either the distinguished name or canonical name for the group in Active Directory or the group name in RADIUS.

6. If you added a new user or group, select the Role Policy tab to assign a Role Policy to the user or group.
   For more information, go to Assign Roles to a User or Group.
7. Click OK.

Use WatchGuard Server Center to Configure Users or Groups

1. In the left navigation bar, select Users.
   The Users page appears.

2. To add a new user, click Add.
   To edit details for an existing user, select a user from the list and click Edit.
   The User and Group Properties dialog box appears.

3. In the Name text box, type a name for the user or group.
   
4. Select a user or group type:

• To define a new user to be authenticated locally, select Local User.
  In the Passwordand Confirm Password text boxes, type a new password.
• To define a new user to be authenticated to an Active Directory or RADIUS server, select External User.
• To define a new group to be authenticated to an Active Directory or RADIUS server, select External Group.

5. If you added a new user or group, select the Role Policy tab to assign a Role Policy to a user or group.
   For more information, go to Assign Roles to a User or Group.
6. Click OK.

Remove a User or Group

You can not remove predefined users or groups. You can only remove user-defined users and groups.

To remove a user or group:

1. In the Users list, select the user or group you want to delete.
2. Click Remove.
   A message dialog box appears and asks whether you are sure you want to delete the user or group.
3. Click Yes.
   The user or group is removed from the list.

Related Topics

About Role-Based Administration

About Predefined Roles

Assign Roles to a User or Group

Define Roles and Role Properties