Prerequisites
Active Directory groups
Access control in Recording Service is carried out by Active Directory security groups. Groups govern both communication between Recording Service and Recorders that are running on workstations, and user access to the Recording Service website. Groups must be created prior to installing the Recording Service. During the installation of Recording Service, all created groups are specified. In order for the logs recorded by Recorder on the user's computer to be sent to Recording Service for processing, or for the user to have access to the Recording Service website, user accounts must be added to the Active Directory security groups specified during the Recording Service installation.
If you need to grant users access to Recording Service, depending on their role, add them to the appropriate Active Directory groups.
Groups configuration
Active Directory security groups provide access control to Recording Service. Below you will find detailed information about rules to follow when creating and assigning users to groups:
Important. Groups must be created prior to installing Recording Service.
- All computers on which Recorder and Recording Service is to be installed must be members of the same Active Directory domain.
- Create the following groups in Active Directory and add user accounts to them, which will be used to work with Recording Service and Recorder.
Note. You can use an existing security group or create the following security groups in Active Directory. - Recording Service admin group (e.g. Domain\RS-admins)
Assign this group full control over the Recording Service web application. Then add user accounts to the group to grant them admin access to the Recording Service website.
Important. Users that will install Recording Service Agent on other machines should also be included in this group. - Recording Service user group (e.g. Domain\RS-users)
Assign this group limited control over the Recording Service web application. Then add user accounts to the group to grant them user access to the Recording Service website. Users added to this group will not be able to change authentication settings and some security settings that are related to users and sensitive information. - Recorder user group (e.g. Domain\Recorder-users)
Assign this group write access over Recording Service. Then add user accounts to the group to grant their Recorder instances write access to the Recording Service website. This will allow Recorder instances to send logs to Recording Service.
05.09.2024 16:23:54