Some organizations prefer to have their users authenticate to Lumeta Enterprise Edition using Active Directory (AD). This arrangement transmits AD user-rights to the Lumeta system and controls what individual users can see when logged in to a Lumeta Command Center.
The admin and manager users and see these roles by default.
In the set of example users below, user2 would see groups 2 and 3; user4 would see groups 4, 5, and 6.
- user1 - group1, group2
- user2 - group2, group3
- user3 - group1, group2, group4, group5
- user4 - group4, group5, group6
- user5 - group6
To map Active Directory (AD) groups and roles to Lumeta organizations, here's the process.
Prerequisites
- Ensure that Groups and Users have already been set up in an Active Directory (AD) server before beginning this procedure. See https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal to learn how.
- Find out the credentials to your organization's AD server. Here are the types of information you'll need and an example of most (We've masked the name of our Active Directory server):
Active Directory CLI Commands
To configure Active Directory on Lumeta Enterprise Edition:
- Identify the Host Name or IP Address of your Command Center.
- Use that information to log in to the CLI of your Command Center.
- At the command-line prompt, enter
authentication ad
- These are the available AD Authentication CLI commands, their purpose and syntax, and an example of each command. The Active Directory CLI commands are presented here in the order they are presented on the CLI menu. Although not fixed, the order of operations is likely to be 1) configure, 2) viewconfig, 3) netbios, 4) enable 5) groupmapping. This order of operations in the last column of the table below.
CLI Command Description & Example Likely Order of Operations groupmapping Maps an Active Directory group to an Organization in Lumeta Enterprise Edition
If your Active Directory mapping introduces new Organizations, you will need to create those organizations in the Command Center as follows:
5 configure Configures an Active Directory authentication server
1 netbios The netbios is an alias for the hostname used in Active Directory authentication.
In this example, the hostname of the Command Center is longer than the maximum number of characters allowed, so AD could not be enabled. In cases like these, use the netbios to serve as an alias for a too-long hostname.
This command would create a hostname on the AD server with the name "TestAD."
3 enable/disable Enables and disables an AD authentication
4 viewconfig Displays the current AD configuration
2 clearconfig Clears the current AD configuration
optional
Viewing Users in Lumeta
When an AD user logs in to Lumeta, and browses to Settings > Users, users, groups, and organizations to which he has been given rights in the AD server groupings––and only those––are visible.
