Registering Standard-Privileges Administrators
There are four types of standard administrator privileges in accordance with the functional categories and they are assigned to Administrator 1 through Administrator 4 (built-in administrators). You can assign all four privileges to one person, or assign a specific privilege to a specific person. When Windows authentication or LDAP authentication is activated, you can assign administrator privileges to external authentication server accounts as well (external administrators).
Sharing the administrator tasks facilitates each administrator's tasks and at the same time prevents unauthorized operations by administrators.
Types of standard administrator privileges
User Management: Manages information registered in the Address Book. You can add users to the Address Book and change the registered information.
Machine Management: Mainly manages the settings of the devices. You can configure the settings so that the settings for each function can be changed only by the administrator.
Network Management: Manages the settings for connecting to the network.
File Management: Manages the permission to access the stored files. You can specify the settings so that only the registered users or permitted users can view or edit the files stored in the machine.
Workflow to register built-in administrators
Activate Administrator Authentication.
Activate the Administrator Authentication function of the machine from [Settings].
Activating Administrator AuthenticationLog in to the machine as an administrator.
Enter the login user name and login password of a built-in administrator to log in to the machine.
Logging in to the Machine as an AdministratorAdd built-in administrators or change the privileges.
Assign the privileges to each administrator. You can register up to four built-in administrators.
Adding Built-in Administrators or Changing the Privileges
Workflow to register external administrators
Activate Administrator Authentication.
Activate the Administrator Authentication function of the machine from [Settings].
Activating Administrator AuthenticationLog in to the machine as an administrator.
Enter the login user name and login password of a built-in administrator to log in to the machine.
Logging in to the Machine as an AdministratorRegister external administrator groups and assign the privileges.
Register external administrator groups and assign standard administrator privileges.
Registering External Administrator Groups and Assigning the Standard Administrator Privileges
The built-in administrators are distinguished from the users registered in the Address Book. The login user name registered in the Address Book cannot be used as the login user name of a built-in administrator.
An administrator can manage the machine by activating the management function. Select whether to activate the management function according to the range of information to manage, and then specify the allowable range of settings by users.
If you have activated Administrator Authentication, make sure not to forget the login user names and login passwords of the built-in administrators. If you forget an administrator login user name or password, you must specify a new password using the supervisor's privilege.
Changing the Password of a Built-in Administrator
On the Home screen, press [Settings].
Press [System Settings].
Press [Settings for Administrator]
[Authentication/Charge] [Administrator Authentication/User Authentication/App Auth.] [Administrator Authentication Management].For each standard administrator privilege to activate Administrator Authentication, select [On] from the list.
User Management: To manage the information registered in the Address Book, select [On].
Machine Management: To configure the settings so that the initial settings for each function can be changed only by the administrator, select [On]
Network Management: To manage the network settings, select [On].
File Management: To manage the files stored in the machine, select [On].
From Available Settings, select the items subject to management.
The selected items cannot be changed by users.User Management
Administrator Tools: Mainly restrict the settings for the Address Book.
Machine Management
Press [Not Selected] next to Available Settings, select the items subject to management on the Available Settings screen, and then press [OK].
General Features: Restrict the settings for the control panel and paper output tray.
Tray Paper Settings: Restrict the settings for the size and type of the paper set in the paper tray.
Timer Settings: Restrict the settings for the time and processing hours.
Interface Settings: Restrict the settings related to the network.
File Transfer: Restrict the settings related to the e-mail send and receive functions.
Administrator Tools: Mainly restrict the settings related to the machine.
Maintenance: Restrict the settings for print correction.
Network Management
Interface Settings: Restrict the settings related to the network.
File Transfer: Restrict the settings related to the e-mail send and receive functions.
Administrator Tools: Mainly restrict the settings related to the network and security.
File Management
Administrator Tools: Restrict the settings for the File Protection and Document Server functions.
Press [OK].
Press [Home] (
)
- Administrator Authentication can also be activated via Web Image Monitor. For details, see Web Image Monitor Help.
To log in to the machine for the first time, log in as Administrator 1 of the built-in administrators. Refer to the provided guide for the login user name. Enter the login password that was set as the login password at the first startup.
Logging in to the machine using the control panel
On the Home screen, press [Login].
Enter the login user name and login password of an administrator, and then press [Login].
When you log in, the user icon is displayed at the upper left on the screen.
To register or change a built-in administrator, follow the procedures described in Adding Built-in Administrators or Changing the Privileges.
After completing machine operations, press [Logout].
You can also log out of the machine by pressing the energy saver key ().
If you log in to the machine using one of the standard administrator privileges, the name of the built-in administrator logging in appears. When you log in with a user name that has multiple standard administrator privileges, one of the standard administrator privileges associated with that name is displayed.
For the characters that can be used for login user names and passwords, see Usable Characters for User Names and Passwords.
Logging in to the machine using Web Image Monitor
Launch the Web browser.
Enter "http://(IP address of the machine or host name)/" on the address bar of the Web browser, and then press the Enter key.
Accessing to Web Image MonitorClick [Login].
Enter the login user name and login password of the administrator, and then click [Login].
After completing machine operations, click [Logout].
Delete the cache memory of a web browser after logging out.
The Web browser might be configured to auto complete login dialog boxes by keeping login user names and passwords. This function reduces security. To prevent the browser from keeping login user names and passwords, disable the browser's auto complete function.
You can register up to four administrators. All four registered personnel can have all the standard administrator privileges. To reduce the administrator's load, each of the four registered personnel can have a specific one of the standard administrator privileges.
Discuss the number of users to add and privileges to give in advance, decide the login user name and login password for Administrator 2 to Administrator 4, and configure the settings.
Do not forget the login user names and login passwords of the added built-in administrators.
A built-in administrator cannot change the login user names and passwords for other built-in administrators.
Log in to the machine as an administrator with all the standard administrator privileges on the control panel.
Logging in to the Machine as an AdministratorOn the Home screen, press [Settings].
Press [System Settings].
Press [Settings for Administrator]
[Authentication/Charge] [Administrator Authentication/User Authentication/App Auth.] [Register/Change Administrator] [Set Administrator Login User Name/Login Password].Press the desired built-in administrator ([Administrator 1] to [Administrator 4]).
Specify the login user name and login password, and then press [OK].
For the characters that can be used for login user names and passwords, see Usable Characters for User Names and Passwords.
When you manage the machine with software supporting SNMPv3 such as Device Manager NX, you have to specify the password to encrypt communication.
After completing the settings for each administrator, press [Close], and then press [Set Administrator Privileges].
Select a built-in administrator to assign for each standard administrator privilege, and then press [OK].
Assign the privileges of User Administrator, Machine Administrator, Network Administrator, or File Administrator to [Administrator 1] to [Administrator 4].
By default, all standard administrator privileges are assigned to the logged-in built-in administrator (Administrator 1).
Press [OK].
When settings are complete, the machine logs you out automatically.
Take note of the login user names and login passwords specified for other administrators and inform them of the specified ones.
An administrator with any one of the standard administrator privileges can add built-in administrators or change the privileges as well by logging in to the machine. The privilege(s) that the administrator can assign to other built-in administrators, however, is limited to the same privilege as the one that is assigned to the administrator himself.
A custom-privileges administrator with the Authentication/Charge privilege can add built-in administrators as well by logging in to the machine. However, the administrator is not allowed to change the privileges.
You can add built-in administrators or change the privileges by using Web Image Monitor as well. For details, see Web Image Monitor Help.
When Windows authentication or LDAP authentication is activated as the user authentication method, you can register external authentication server accounts as external administrators. Register external administrator groups and assign the same four types of standard administrator privileges as the ones that are assigned to the built-in administrators.
To register a Windows server account as an external administrator, register an external administrator group with the same name as the global account to which the target account belongs and for which it has administrative privileges. You first need to confirm the name of the global group to which the target account belongs.
Specifying Windows Authentication
You cannot configure any Windows server account as an account for SNMPv3 access.
When the central address book management is enabled, no external administrators can be registered.
Log in to the machine as an administrator with all the standard administrator privileges on the control panel.
Logging in to the Machine as an AdministratorOn the Home screen, press [Settings].
Press [System Settings].
Press [Settings for Administrator]
[Authentication/Charge] [Administrator Authentication/User Authentication/App Auth.] [Register/Change Administrator].Press [External Administrator Setting] under External Administrator.
Select [On] from the list next to External Administrator, and then press [OK].
Press [External Administrator Group Management] under External Administrator.
Select [* Not Registered], and then press [Register/Change].
Enter the name of an external administrator group for Group Name.
To register Windows server accounts as external administrators, enter the same group name as the name of the global group to which the target account belongs.Select [Standard Privileges] next to Privilege Type, and then select the administrator privileges that you want assign to the external administrator.
Press [OK].
Press [Close].
Press [OK].
When settings are complete, the machine logs you out automatically.
You can register up to 10 external administrator groups.
To change the name or standard administrator privilege of the registered external administrator group, select a group name in step 8, and then press [Register/Change].
To delete the registered external administrator group, select a group name in step 8, and then press [Delete].
An administrator with any one of the standard administrator privileges can add external administrator groups or change the privileges as well by logging in to the machine. The privilege(s) that the administrator can assign to other external administrator groups, however, is limited to the same privilege as the one that is assigned to the administrator himself.
In the event that a user account on the Windows server belongs both to a group with the administrator privileges and to an ordinary user group, the user is recognized as an ordinary user, not as an external administrator, when logging in to the machine. To let the user log in to the machine as an external administrator, make sure that the user is not a member of an ordinary user group on the Windows server.
When a user registered in the Address Book of the machine logs in to the machine, user recognition by the machine varies depending on the group to which the user is registered on the Windows server.
When registered in a group with the administrator privileges: Recognized as an external administrator.
When registered in an ordinary user group: Recognized as the same user as the one registered in the address book of the machine.
You can register external administrator groups and assign the standard administrator privileges using Web Image Monitor as well. For details, see Web Image Monitor Help.