<%NUMBERING1%>.<%NUMBERING2%>.<%NUMBERING3%> PRTG Manual: System Administration—User Groups

To open the system administration, select Setup | System Administration from the main menu bar. Select the various tabs to change the different settings.

System Administration Bar

You can define the following aspects of your PRTG system setup:

The PRTG administrator users can change existing user groups, add new ones, and define the users that are members of certain groups.

If you use PRTG on premises and open the system administration page from another administration page, PRTG asks you to enter your credentials again for security reasons if 15 minutes (900 seconds) have passed since your last credential-based login. A dialog box appears. Enter your Login Name and Password for PRTG in the corresponding fields and confirm to continue.

All the security settings and further rights management are conducted via the user groups. This means that group membership controls what a user may do and which objects the user sees when logged in. The actual rights for each object can be defined in an object's settings. There, you can define different rights for each user group.

The User Groups table shows you all existing user groups with various types of information at a glance. You can see all Members of a group and all user accounts that have this group as Primary Group or as Active Directory Group.

To change a user group's settings, select it from the list by clicking the group name.

To add a new user to PRTG on premises, hover over and select Add User from the menu. The options are the same as for existing users (with slight differences).
To add a new user to PRTG hosted by Paessler, click the Invite User button. The options are almost the same as for existing users, but the initial login password is generated automatically. The new user can change it later. Click Send Invite to save your settings and to send the invitation per email to the defined Primary Email Address.

To batch-add several users at once in a simple way, hover over and select Add Multiple Users from the menu. In the dialog box that appears, select an existing user group from the dropdown menu and enter or paste a list of email addresses. They can be separated by a space, comma, semicolon, or a new line. Click the OK button to confirm. For each address, PRTG creates a new local user account within the selected user group, carrying the email address as value for Login Name, Username, and Email Address. A new password is automatically generated and sent to the email address.

To add a new user group to PRTG on premises, hover over and select Add User Group from the menu. The options are the same as for existing groups (with slight differences).
To add a new user group to PRTG hosted by Paessler, hover over the Add User Group button.

For each user group you create, PRTG automatically adds a new device group with the name [group_name] home to the device tree.
For each user group you create, PRTG automatically adds a new email notification to notifications with read access rights for this user group. It has the name Email to all members of group [group_name].
By default, there are no access rights on existing objects for a newly created PRTG user group. Initially, users in this group do not see any objects in the PRTG device tree except the automatically created home group (with write access rights). Edit the object settings in your device tree and set access rights for your newly created user group in the Inherit Access Rights section.
The easiest way is to set these rights in the Root Group Settings.

The multi-edit option is not available for the standard user groups PRTG Administrators and PRTG Users Group.

Predefined objects cannot be deleted.

If you want to delete an Active Directory group, you have to delete all users that are in this group in PRTG first. This is because users that you add with Active Directory Integration always have this group as their primary group.

User Groups Settings

This documentation refers to the PRTG System Administrator user accessing the PRTG web interface on a master node. If you use other user accounts, interfaces, or nodes, you might not see all of the options in the way described here. If you use a cluster installation, note that failover nodes are read-only by default.

User Group Settings
User Group Name	Enter a name for the user group.
Administrative Rights	Define if the members of this group are PRTG administrators. If you enable this option, all members of this group have full access to all monitoring objects, maps, reports, user accounts, user groups, and they can change the PRTG monitoring configuration. Choose between: Yes: Give full PRTG administrator rights to all members of this group. No: Do not make members of this group administrators. Access to monitoring objects for users that are members of this group is controlled by the Access Rights settings defined in the Object Settings of probes, groups, devices, or sensors. This option is especially useful in combination with the Active Directory option below.
Default Homepage	Enter a PRTG internal web page. This sets the default homepage for all new users created with this group. A user is redirected to this page after logging in. This concerns new users either added by an Active Directory login or by the Add Multiple Users feature.
Use Active Directory	Define if this PRTG user group is connected to a group in your Active Directory: Yes: Connect this group to an AD group. Choose below. For detailed information, see Active Directory Integration. No: Do not use Active Directory integration for this group, but choose local user accounts instead. This option is not available in PRTG hosted by Paessler.
Active Directory Group	If a valid Active Directory Domain is set in the System Administration—Core & Probes settings and Active Directory integration is enabled above, a dropdown menu appears, showing the groups in your Active Directory. Choose the group whose members can log in to PRTG using their Active Directory domain credentials. All of those AD users are in the security context of the PRTG group you are about to create or edit. For detailed information, see section Active Directory Integration. If your Active Directory contains more than 1000 entries in total, PRTG displays an input field instead of a dropdown menu. This is for performance reasons. In the input field, you can enter the group name only. PRTG then adds the prefix automatically. PRTG caches this list for one hour. You can update this list earlier by manually clearing the cache via the Clear Caches button in the System Administration—Administrative Tools. This is useful if you add new groups to the Active Directory and want them to be available in the list more quickly. This option is not available in PRTG hosted by Paessler.
New User Type	If Active Directory integration is enabled above, define the default rights for all new users in this user group. If a user logs in for the first time using Active Directory credentials, PRTG automatically creates a new local user account for this user, applying the user type defined here. Choose between: Read/Write User: The user may change settings. Read-Only User: The user may not edit any settings except the own password. This is a good choice for public or semi-public logins.
Acknowledge Alarms	This setting is only visible if Read-Only User is enabled above. Acknowledging an alarm is an action that requires write access rights. However, you can explicitly allow this action to read-only users. If enabled, they still do not have write access, but may acknowledge alarms. Choose between: User may acknowledge alarms: Allow read-only users to acknowledge alarms. User may not acknowledge alarms (default): Read-only users are not able to acknowledge alarms.
Allowed Sensors	Define if members of this user group can create all available sensors or only specific sensors: Users may always create all sensor types: No restrictions for group members are applied. Users may create certain sensor types only: Choose the allowed sensor types below. This option is especially interesting for a managed service provider (MSP).
Users May Create These Sensor Types	This field is only visible if you enable Users may create certain sensor types only above. A list of all available types is shown with their name. Sensor types with running instances on the installation are shown in bold letters for your convenience. Select the desired types by adding check marks in front of the respective lines. You can also select all items or cancel the selection by using the check box in the table header. This setting does not apply when a member of this user group runs an Auto-Discovery. The auto-discovery adds all sensor types that are defined in the device templates used.
Ticket System Access	Define if the members of this user group can use the PRTG ticket system: Members may use the Ticket System: Users in this group can read, create, assign, and modify tickets. Group members that are read-only users never have access to the ticket system. Members may NOT use the Ticket System: The Tickets option in the main menu bar is not visible to users in this group.

Members
Members	This setting is only available if you disable Active Directory integration above. Define which local user accounts are members of this group. To add a user account from the list, add a check mark in front of the username. The user accounts that are available depend on your setup.

Primary Users
User List	Shows a list of all user accounts with this group set as primary group. This is shown for information purposes only. You can change it in a user account's settings.

Comments

On the Comments tab, you can enter free text for each object. You can use this function for documentation purposes or to leave information for other users.

Save your settings. If you change tabs or use the main menu, all changes to the settings are lost.

History

On the History tab, all changes in the settings of an object are logged with a time stamp, the name of the PRTG user who made the change, and a message. The history log retains the last 100 entries.

Save your settings. If you leave the current page, all changes to the settings are lost.

Setup—Topics
Account Settings—My Account Account Settings—Notification Templates Account Settings—Notification Contacts Account Settings—Schedules System Administration—User Interface System Administration—Monitoring System Administration—Notification Delivery System Administration—Core & Probes System Administration—User Accounts System Administration—User Groups System Administration—Administrative Tools System Administration—Cluster PRTG Status—System Status PRTG Status—Auto-Update PRTG Status—Cluster Status PRTG Status—Licensing Status and Settings Optional Downloads Desktop Notifications Support—Help and Support Center Support—Contact Support

Setup—Topics

Others
There are some settings that you must make in the PRTG Administration Tool, available as native Windows application. For more details, see the sections: PRTG Administration Tool on Core Server System PRTG Administration Tool on Remote Probe System

Others

There are some settings that you must make in the PRTG Administration Tool, available as native Windows application. For more details, see the sections:

Keywords: Configure,Configure User Group