Define or Remove Users or Groups

Some of the features described in this version of Fireware Help are only available to participants in the WatchGuard Beta program. If a feature described in this topic is not available in your version of Fireware, it is a beta-only feature.

You can define, edit, and remove users and user groups for role-based administration in WatchGuard System Manager (WSM) and WatchGuard Server Center. You can choose how a user or group is authenticated and define the password for a local user.

When you edit a user or group, you can change all the details for the user or group, but you cannot change the user or group name. Instead, you must remove the existing user or group and then add a new user or group with the new name.

Use WatchGuard System Manager to Configure Users or Groups

  1. Connect to Your Management Server with WSM.
  2. Select File > Manage Users.
    The Manage Users dialog box appears.

Screen shot of the Manage Users dialog box

  1. To add a new user, click Add.
    To edit details for an existing user, select a user from the list and click Edit.
    The User Properties dialog box appears.

Screen shot of the User and Group Properties dialog box

  1. On the User or Group tab, in the Name text box, type a name for the user or group.
  2. Select a user type:
  3. To define a new user to be authenticated locally, select Local User.
    In the Password text box, type a new password. In the Confirm Password text box, type the password again.
  4. To define a new user to be authenticated to an Active Directory or RADIUS server, select External User. This is the principal name for the user in Active Directory or the user name on the RADIUS server.
  5. To define a new group to be authenticated to an Active Directory or RADIUS server, select External Group. This is either the distinguished name or canonical name for the group in Active Directory or the group name in RADIUS.
  1. If you added a new user or group, select the Role Policy tab to assign a Role Policy to the user or group.
    For more information, see Assign Roles to a User or Group.
  2. Click OK.

Use WatchGuard Server Center to Configure Users or Groups

  1. In the left navigation bar, select Users.
    The Users page appears.

WatchGuard Server Center — Users page

  1. To add a new user, click Add.
    To edit details for an existing user, select a user from the list and click Edit.
    The User and Group Properties dialog box appears.

User and Group Properties dialog box

  1. In the Name text box, type a name for the user or group.
  2. Select a user or group type:
  • To define a new user to be authenticated locally, select Local User.
    In the Passwordand Confirm Password text boxes, type a new password.
  • To define a new user to be authenticated to an Active Directory or RADIUS server, select External User.
  • To define a new group to be authenticated to an Active Directory or RADIUS server, select External Group.
  1. If you added a new user or group, select the Role Policy tab to assign a Role Policy to a user or group.
    For more information, see Assign Roles to a User or Group.
  2. Click OK.

Remove a User or Group

You can not remove predefined users or groups. You can only remove user-defined users and groups.

To remove a user or group:

  1. In the Users list, select the user or group you want to delete.
  2. Click Remove.
    A message dialog box appears and asks whether you are sure you want to delete the user or group.
  3. Click Yes.
    The user or group is removed from the list.

See Also

About Role-Based Administration

About Predefined Roles

Assign Roles to a User or Group

Define Roles and Role Properties