Step 1: While logged in as admin, navigate to the Users > Local Users page.
Step 2: Click the Add User button.
Step 3: Enter a Name and Password for the user.
Step 4: Click on the Group Membership tab.
Step 5: Select the appropriate group to give the user Administrator privileges:
• Limited Administrators - The user has limited administrator configuration privileges.
• SonicWALL Administrators - The user has full administrator configuration privileges.
• SonicWALL Read-Only Admins - The user can view the entire management interface, but cannot make any changes to the configuration.
Step 6: Click the right arrow button and click OK.
Step 7: To configure the multiple administrator feature such that administrators are logged out when they are preempted, navigate to the System > Administration page.
Step 8: Select the Log out radio button for the On preemption by another administrator option and click Accept.
When an administrator attempts to log in while another administrator is logged in, the following message is displayed. The message displays the current administrator’s user name, IP address, phone number (if it can be retrieved from LDAP), and whether the administrator is logged in using the GUI or CLI.
This window gives you three options:
• Continue - Preempts the current administrator. The current administrator is dropped to non-config mode and you are given full administrator access.
• Non-config - You are logged into the appliance in non-config mode. The current administrator’s session is not disturbed.
• Cancel - Returns to the authentication screen.
Activating Configuration Mode
When logging in as a user with administrator rights (that is not the admin user), the User Login Status popup window is displayed.
To go to the SonicWALL user interface, click the Manage button. You will be prompted to enter your password again. This is a safeguard to protect against unauthorized access when administrators are away from their computers and do not log out of their session.
Disabling the User Login Status Popup
You can disable the User Login Status popup window if you prefer to allow certain users to log in solely for the purpose of managing the appliance, rather than for privileged access through the appliance. To disable the popup window, select the Members go straight to the management UI on web login checkbox when adding or editing the local group.
If you want some user accounts to be administrative only, while other users need to log in for privileged access through the appliance, but also with the ability to administer it (that is, some go straight to the management interface on login, while others get the User Login Status popup window with a Manage button), this can be achieved as follows:
Step 1 Create a local group with the Members go straight to the management UI on web login checkbox selected.
Step 2 Add the group to the relevant administrative group, but do not select this checkbox in the administrative group.
Step 3 Add those user accounts that are to be administrative-only to the new user group. The User Login Status popup window is disabled for these users.
Step 4 Add the user accounts that are to have privileged and administrative access directly to the top-level administrative group.
Viewing Multiple Administrator Related Log Messages
Log messages are generated for the following events:
• A GUI or CLI user begins configuration mode (including when an admin logs in).
• A GUI or CLI user ends configuration mode (including when an admin logs out).
• A GUI user begins management in non-config mode (including when an admin logs in and when a user in configuration mode is preempted and dropped back to read-only mode).
• A GUI user begins management in read-only mode.
• A GUI user terminates either of the above management sessions (including when an admin logs out).