PRTG Manual: System Administration—User Groups

To open system administration, select Setup | System Administration from the main menu. Click on the tabs to change the different settings.

System Administration Bar

System Administration Bar

You can define the following aspects of your PRTG system setup:

The PRTG administrator users can change existing user groups or add new ones, and define the users that are member of a certain group.

icon-prtg-on-premisesIf you use PRTG on premises and open the system administration page from another administration page, PRTG will ask you to enter your credentials again for security reasons if 15 minutes (900 seconds) have passed since your last credential-based login. A dialog box will appear. Enter your Login Name and Password for PRTG in the corresponding fields and confirm to continue.

All the security settings as well as further rights management are conducted via the user groups. This means that group membership controls what a user may do and which objects the user will see when logged in. The actual rights for each object can be defined in an object's settings. There, you can define different rights for each user group.

The User Groups table shows you all existing user groups with various information at a glance. You can see all Members of a group as well as all user accounts that have this group as Primary Group or as Active Directory Group.

  • To change a user group's settings, select it from the list by clicking on the group name.
  • To add a new user to PRTG on premises, hover over plus_button and select New User from the menu. The options are the same as for existing users (with slight differences).
  • To add a new user to PRTG in the cloud, click the Invite User button. The options are almost the same as for existing users, but the initial login password will be generated automatically. The new user can change it later. Click Send Invite to save your settings and to send the invitation per email to the defined Primary Email Address.  
  • To batch-add several users at once in a simple way, hover over plus_button and select Multiple New Users from the menu. In the dialog box that appears, select an existing user group from the dropdown menu and enter or paste a list of email addresses. They can be separated by a space, comma, semicolon, or a new line. Click the OK button to confirm. For each address, PRTG will create a new local user account within the selected user group, carrying the email address as value for Login Name, Username, and Email Address. A new password will be generated automatically and sent to the email address.
  • To add a new user group to PRTG on premises, hover over plus_button and select New User Group from the menu. The options are the same as for existing groups (with slight differences).
  • To add a new user group to PRTG in the cloud, hover over the New User Group button.
  • For each user group you create, PRTG automatically adds a new device group with the name [group_name] home to the device tree.
  • For each user group you create, PRTG automatically adds a new email notification to notifications with read access rights for this user group. It has the name Email to all members of group [group_name].
  • By default, there are no access rights on existing objects for a newly created PRTG user group. Initially, users in this group will not see any objects in the PRTG device tree except the automatically created home group (with write access rights). Please edit the object settings in your device tree and set access rights for your newly created user group in the Inherit Access Rights section.
    icon-i-roundThe easiest way is to set these rights in the Root Group Settings.

icon-i-roundThe multi-edit option is not available for the standard user groups PRTG Administrators and PRTG Users Group.

icon-i-roundPredefined objects cannot be deleted!

icon-i-round-redIf you want to delete an Active Directory group, you have to delete all users that are in this group in PRTG first. This is because users that you add with Active Directory Integration always have this group as their primary group.

User Groups Settings

icon-i-roundThis documentation refers to the PRTG System Administrator user accessing the Ajax interface on a master node. If you use other user accounts, interfaces, or nodes, you might not see all of the options in the way described here. If you use a cluster installation, note that failover nodes are read-only by default.

User Group Settings

User Group Name

Enter a name for the user group.

Administrative Rights

Define if the members of this group will be PRTG administrators. If you enable this option, all members of this group will have full access to all monitoring objects, maps, reports, user accounts and user groups, and they can change the PRTG monitoring configuration. Choose between:

  • Yes: Give full PRTG administrator rights to all members of this group.
  • No: Do not make members of this group administrators. Access to monitoring objects for users that are member of this group will be controlled by the Access Rights settings defined in the Object Settings of Probes, Groups, Devices, or Sensors.

icon-i-roundThis option is especially useful in combination with the Active Directory option below.

Default Homepage

Enter a PRTG internal web page. This will set the default homepage for all new users created with this group. A user will be redirected to this page after logging in. This concerns new users either added by an Active Directory login or by the Add multiple users feature.

Use Active Directory

Define if this PRTG user group will be connected to a group in your active directory. Choose between:

  • Yes: Connect this group to an AD group. Choose below. For detailed information, see Active Directory Integration.
  • No: Do not use Active Directory integration for this group, but choose local user accounts instead.

icon-prtg-on-demandThis option is not available in PRTG in the cloud.

Active Directory Group

If a valid Active Directory Domain is set in the System Administration—Core & Probes settings and Active Directory integration is enabled above, a dropdown menu will appear, showing the groups in your Active Directory. Choose the group whose members will be able to log in to PRTG using their Active Directory domain credentials. All of those AD users will be in the security context of the PRTG group you're about to create/edit.

icon-book-arrowsFor detailed information, see Active Directory Integration.
 

If your Active Directory contains more than 1000 entries in total, PRTG will display an input field instead of a dropdown menu. This is done due to performance reasons. In the input field, you can enter the group name only. PRTG will then add the prefix automatically.

icon-prtg-on-demandThis option is not available in PRTG in the cloud.

New User Type

If Active Directory integration is enabled above, define the default rights for all new users in this user group. If a user logs in for the first time using Active Directory credentials, PRTG will automatically create a new local user account for this user, applying the user type defined here. Choose between:

  • Read/Write User: The user may change settings.
  • Read Only User: The user may not edit any settings except the own password. This is a good choice for public or semi-public logins.

Allowed Sensors

Define if members of this user group will be able to create all available sensor types or only specific ones. Choose between:

  • Users may always create all sensor types: No restrictions for group members are applied.
  • Users may create certain sensor types only: Choose the allowed sensor types below. This option is especially interesting for a Managed Service Provider (MSP).

Users May Create These Sensor Types

This field is only visible if you defined that the users in this group are only allowed to create certain sensor types. A list of all available types is shown with their name. Select the desired types by adding check marks in front of the respective lines.  You can also select and deselect all items by using the check box in the table head.

Ticket System Access

Define if the members of this user group will be able to use the PRTG ticket system. Choose between:

  • Members can use the Ticket System: No restrictions for group members are applied.
  • Members can NOT use the Ticket System: The Tickets option in the main menu bar will not be visible to users in this group.

Members

Members

This setting is available only if Active Directory integration is disabled above. Define which local user accounts will be a member of this group. To add a user account from the list, add a check mark in front of the username. The user accounts available depend on your setup.

Primary Users

User List

Shows a list of all user accounts with this group set as primary group. This is shown for information purposes only. You can change it in a user account's settings.

Comments

On the Comments tab you can enter free text for each object. You can use this function for documentation purposes or to leave information for other users.

Click Save to save your settings. If you change tabs or use the main menu, all changes to the settings will be lost!

History

In the History tab all changes in the settings of an object are logged with a timestamp, the name of the PRTG user who made the change, and a message. The history log retains the last 100 entries.

Click the Continue button to save your settings. If you leave the current page, all changes to the settings will be lost!

 

Setup—Topics

Others

There are some settings that you must make in the PRTG Administration Tool, available as native Windows application. For more details, see the sections: