Table of Contents Previous Next Index

Section 7 Creating and Editing User Accounts and Identities

Section 7 Creating and Editing User Accounts and Identities
A user account is used for the actual login to LISTSERV Maestro. To be able to login, a user must supply a valid account name (and the account's group name, unless the account does not belong to a group), together with the account's password. Each user account is associated with a certain set of user rights that allow or disallow different actions in LISTSERV Maestro while you are logged in with this account.
An identity is a collection of several accounts which belong to one and the same "identity", usually a person. By collecting all accounts of one person into an identity, LISTSERV Maestro knows that these accounts all belong together. As a result, the user is then allowed to switch between the accounts in the identity without having to perform an actual logout and login. In other words, if a user logs in with one account that belongs to an identity, he can then switch over to all other accounts in the same identity without having to first logout the old account and then login again with the new account (he does not even have to provide the password of the new account).
Identities are useful in cases where one and the same person was assigned several accounts for different purposes. The user can then simply log in with one account and perform some tasks necessary under this account, then easily switch to any of his other accounts and perform some tasks there.
Important: Because of this switching between accounts in the identity, it is important not to add any accounts to one and the same identity, between which such a switching will not be allowed.
The Administer User Accounts and Identities screen displays a list of all defined user accounts and identities.
Figure 7-1 Administer User Accounts and Identities
Each user name is a link that opens the Define User Account screen, and each identity name is a link that opens the Define Identity screen. Links on the Define User Account screen lead to user settings that can be changed for only that single user account. If the user is a member of a group, the group name is a link that opens the Group Settings screen, containing settings that can be changed for the entire group.
From the Administer User Accounts screen it is possible to:
7.1 Creating a New User Account
To create a new user account, click the [Add User Account] button. The Define User Account screen opens.
Figure 7-2 Defining User Account
User – Fill in a user name. User names are not case sensitive, and can be composed of letters, numbers and symbols. User names can also contain spaces. User names must be unique if users are not assigned to a group. Users assigned to different groups may have the same user name as long as the combination of user name and group name is unique.
Group – Assign the user to a group, if desired. Groups are optional and can be left blank. However, users must be assigned to a group in order to use the team collaboration features. Only members of the same group can collaborate on email jobs. The combination of user name and group name must be unique. There cannot be two users with the same name in the same group, although there may be two users with the same name in different groups.
Identity – Assign the user to an identity, if desired. Identities are optional and can be left blank.
Password – Assign a password. All passwords are case sensitive, and must be at least five characters long.
Confirm Password – Retype the password to confirm it.
Check The user is allowed to change his password if you want to grant the user permission to change his or her password. Uncheck this option to revoke this privilege. Click [Save] to save the account information and continue. Click [Cancel] and the new user will not be created.
Note: If the user is allowed to change his/her password, then the Change Password option on the Utility menu in the LISTSERVE Maestro User Interface will be available.
7.2 Creating a New Identity
To create a new identity, click the [Add Identity] button. The Define Identity screen opens.
Figure 7-3 Defining Identity
Enter the identity’s name in the Name field, and then select the accounts that are in the identity.
To add an account to the identity, select it in the Available Accounts list and click the
[->] button. This will move the identity into the Accounts in Identity list.
To remove an account from the identity, select it in the Accounts in Identity list and click the [<-] button. This will move the identity into the Available Accounts list.
Click [OK] to submit your changes, or click [Cancel] to exit without submitting your changes.
Important: LISTSERV Maestro interprets all accounts in an identity as related and allows a user to switch between these accounts without providing the login information for each account. In other words, if a user logs in with one of the accounts in the identity, then this user can switch to all other accounts in the same identity without having to know the passwords of these other accounts. Because of this, it is very important that you do not combine accounts into one identity that should not be accessed by the same user.
7.3 Managing User Rights
To define the Maestro User Interface user rights for the accounts in the currently selected group, click the User Rights Management for Maestro User Interface link on the Administer User Accounts and Identities screen. The User Rights Management for Maestro User Interface screen opens.
Figure 7-4 User Rights Management Screen
From this screen, you can assign user rights for the entire group or for a specific user in that group.
Tip: You can also click on a specific account in the Administer User Accounts and Identities screen and change the Maestro User Interface rights for the selected account only. For more informaiton, see Section 7.4 Editing Account Information and Assigning Single User Settings.
The following user rights can be assigned or unassigned:
Create Jobs – Grants the right to create new jobs. If the user is a member of a group with the right to create new jobs, it is necessary to also define who owns the jobs that are created by this account. Jobs can be owned by the account that creates them or by another group member selected from the Designated Job Owner drop‑down menu. If jobs created by one account are owned by another group member, when the user creates a new job, the ownership will be set to the other group member and the team collaboration default preferences of that account are applied.
Important: If the owner account of a job that another account tries to create has not given that account at least one right in their team collaboration default settings, then the creating account will not be able to start a new job, and an error message will appear on the Start New Job screen.
Create Reports – Grants the right to create new reports. Existing reports are available for all members in a group.
Admin Sender Profiles – Grants the right to create new sender profiles. Existing sender profiles are available for all members in a group.
Admin Drop-Ins – Grants the right to create new drop-in content elements. Existing drop-ins are available for all members in a group.
Admin Content Templates – Grants the right to create, edit, and delete message templates. Enabled templates are available for all members in a group.
Admin Target Groups – Grants the right to administer existing target groups and to create new recipient target groups by providing access to Recipients Target Groups Wizard.
Admin Datasets – Grants the right to administer recipient datasets in the recipient warehouse. This includes creating, editing, and deleting datasets, hosted lists, and individual subscribers. It also grants the right to administer target groups.
Link Datasets & WA – If granted, the user may create a link between any recipient dataset and the LISTSERV Web Interface of the LISTSERV instance that the user is connected to. For a dataset that is linked, the membership area of the dataset will automatically provide links that allow the subscribers to directly access the list archive pages of the LISTSERV Web Interface.
By clicking on the User link, then every member of the group will be granted every user right. In addition, by clicking on the name of the user right (e.g. Create Jobs), then every member of the group will be granted that specific user right.
7.4 Editing Account Information and Assigning Single User Settings
To edit existing account information, click on the account you want to edit. The Account Administration screen opens. Click on User name, group, identity, and password to edit a user’s name, group, and password. Alternatively, select Maestro User Interface to control how the user interacts with the Maestro User Interface.
Figure 7-5 Editing Account Information
7.4.1 Editing General User Settings
To change the user name, group, identity, or password of an existing account, click on User name, group, identity, and password. The Define User Account screen opens. To keep an old password while changing other settings, leave both password fields blank.
7.4.2 Editing Component Specific Settings for Single and Group Users
After an account is initially created, click on Maestro User Interface to open the selection list for all user specific settings. This list will vary depending on whether the user is a member of a group (a group user) or not (a single user). To edit settings at the group level, click on the name of the group from the Administer User Accounts and Identities screen.
Note: The screens that configure group settings are very similar to the screens that configure single user settings. The difference is that settings configured at the group level will affect all members of the group; whereas, settings configured for the single user will only affect that user.
Figure 7-6 Single and Group User Settings Screens
Figure 7-7 Group Settings Screen
Click on any setting to open a screen to edit the setting.
Settings can include any of the following:
User Right Settings – The user rights apply only to the configured user, even if the user belongs to a group. Check the boxes next to the privileges to be granted to the user. Uncheck the boxes next to the privileges to be revoked from the user. User rights settings include:
The user may create new Jobs – Grants the right to create new jobs. If the user is a member of a group with the right to create new jobs, it is necessary to also define who owns the jobs that are created by this account. Jobs can be owned by the account that creates them, or by another group member, selected from a drop‑down menu of existing accounts in the group.
If jobs created by one account are owned by another group member, when the user creates a new job, the ownership will be set to the other group member and the team collaboration default preferences of that account are applied.
Important: If the owner account of a job that another account tries to create has not given that account at least one right in their team collaboration default settings, then the creating account will not be able to start a new job, and an error message will appear on the Start New Job screen.
The user may create new Reports – Grants the right to create new reports. Existing reports are available for all members in a group.
The user may create new Sender Profiles – Grants the right to create new sender profiles. Existing sender profiles are available for all members in a group.
The user may create new Drop-In Content Elements – Grants the right to create new drop-in content elements. Existing drop-ins are available for all members in a group.
TheThe user may administer Content Templates – Grants the right to create, edit, and delete message templates. Enabled templates are available for all members in a group.
The user may administer Target Groups – Grants the right to administer existing target groups and to create new recipient target groups by providing access to Recipients Target Groups Wizard.
The user may administer hosted Recipient Datasets – Grants the right to administer recipient datasets in the recipient warehouse. This includes creating, editing, and deleting datasets, hosted lists, and individual subscribers. It also grants the right to administer target groups.
user may link Recipient Datasets to the LISTSERV Web Interface – If granted, the user may create a link between any recipient dataset and the LISTSERV Web Interface of the LISTSERV instance that the user is connected to. For a dataset that is linked, the membership area of the dataset will automatically provide links that allow the subscribers to directly access the list archive pages of the LISTSERV Web Interface.
Figure 7-8 User Right Settings
LISTSERV Connection – The LISTSERV Connection can be set at several levels. The widest level of setting is the Global Component Setting, which defines the global default LISTSERV Connection on the application level (see Section 5.2 Application Default Settings). These settings will be used as defaults for all accounts that do not have individual settings for group or user level.
The next level is the default setting for a group. To set the LISTSERV settings for an entire group in the user list, click on the group name (appears only if the account belongs to a group). If defined on the group level, the group settings will override the global default settings for that group. The settings will apply to all accounts in the group, except for the LISTSERV Client Address and LISTSERV Client Password settings. These two settings may be configured individually for each account in the group. Accounts in the group for which they are not configured will use the group's settings as the default.
Individual accounts are the last level of settings for the LISTSERV Connection. Individual accounts can belong to a group (group user) or not belong to a group (single user). Settings for individual accounts will override default group and global settings. To set the LISTERV Connection for an individual account, click on the user name from the user list. The screen that opens is different depending on whether the account is a group user or a single user. Single user accounts can have all LISTSERV Connection settings defined. Group user accounts can only define the LISTSERV Client Address and LISTSERV Client Password settings. These individual group settings result in a different LISTSERV email address for each user so that jobs can be identified by owner in the LISTSERV logs.
For information and instructions on how to fill out the fields for setting the LISTSERV Connection, see Section 4 LISTSERV and LISTSERV Maestro. For information about setting a special external host name, see Section 4.2.1 Specifying the LISTSERV Host with Different Internal and External Names. For information on setting up a dedicated LISTSERV instance for processing bounces, see Section 4.2.2 Specifying a Separate LISTSERV Instance for Processing Bounces.
Notes: To prevent inadvertent sharing between groups, each group should have a separate LISTSERV connection client address and password. For extra security, use a separate LISTSERV instance for each group. Remember that each LISTSERV instance requires a separate license, but multiple LISTSERV instances can run on a single Windows server.
Tracking URL – Enter the Tracker URL for the user. Each user or group can have a different Tracker URL, although they all must lead back to the same tracker component. The domain name must resolve to an IP address on the server where the tracker component is installed.
Figure 7-9 Tracking URL
Size Limits – Sets a size limit for email messages. The size limit for an email message applies to the total byte size of the message after all transfer encoding and MIME multipart wrappers have been applied. If the message exceeds the size limit, the delivery will fail.
Figure 7-10 Size Limits
Job ID Prefix – A Job ID Prefix is an optional part of the Job ID. The prefix comes before the system generated Job ID and is separated by a hyphen. Allowing, disallowing, or presetting Job ID Prefixes for users takes place by selecting the corresponding option button and entering the prefix. For more information on job ID prefixes see the LISTSERV Maestro Users Guide.
Tip: Use preset Job ID prefixes to identify jobs from different groups or users more easily. For internal charge-back purposes, the Job ID can be extracted from the job name and base charges on records in LISTSERV's system changelog. If no such identification is necessary, select Any job ID prefix allowed to give users a way of grouping jobs.
Figure 7-11 Job ID Prefix Settings
Content Restrictions – This option defines restrictions for the content of email messages. In the top section of the screen, select the option button to allow or disallow an AOL formatted alternative for HTML email messages. For more information on HTML messages, see the LISTSERV Maestro User’s Manual. The AOL alternative is obsolete and not recommended.
Figure 7-12 Content Restrictions
In the bottom section of the screen, create a “positive list” of all files and/or URLs that will be available for drop-in content. If the list is left blank, no drop-in content in the form of files and/or URLs will be allowed. See the online help for more information on using this setting.
Figure 7-13 Drop-In Content Restrictions
Recipients Restrictions – In the top section of the screen, set the type of recipients available for use for an email job. If Disabled is selected, the option will appear grayed out in the Maestro User Interface, and the user will not be able to select it. If Hidden is selected, the recipient type will be disabled and will not appear at all in the Maestro User Interface.
Figure 7-14 Recipients Restrictions - Type Restrictions
In the lower section of the screen, set the recipient upload restrictions by entering a file name and path if the recipients will be taken from a file on the server "just-in-time" before the job is sent. If the list is left blank, no file access will be allowed. See the online help for more information on using this setting.
Figure 7-15 Recipients Restrictions - Upload Restrictions
Tracking Restrictions – This option defines the type of tracking that will be available, by default. To enable a tracking type, select Enable. To disable, but still display the tracking type, select Disabled. To disable and hide a tracking type, select Hidden. To use the default setting, select Use Default.
Note: For information on setting the default tracking restrictions, see Section 5.2 Application Default Settings.
Figure 7-16 Tracking Restrictions
Hosted Data Settings – Defines the settings for hosted recipient data.
General Hosted Data Settings – Defines an external host name under which subscriber access pages are accessible to subscribers. This should be the same host that the Maestro User Interface (LUI) is running on, but if the host has a different external host name, enter it here. If left blank, then the default will be used.
Hosted List Settings – Select the hosted list type the group members can create.
Figure 7-17 Hosted Data Settings
If Hosted LISTSERV Lists will be used, optional suffixes for the LISTSERV lists can be used by selecting the option. Since there may not be more than one list with the same name on the same LISTSERV server, employing automatically generated or individual group/name suffixes for LISTSERV list names prevents list creation errors due to duplicate list names. See the online help for more details about suffixes.
Tip: By installing separate LISTSERV instances, and configuring the LISTSERV connection for each user/group to use a different LISTSERV instance, then the use of suffixes is not necessary to distinguish between lists. Separate instances will also give each group a separate LISTSERV Web Interface for their lists.
Note: The Suffix field is only visible if the Use individual user/group name suffixes for LISTSERV Lists option was selected while setting up the default hosted data settings. For more information, see Section 5.2 Application Default Settings.
DomainKeys Settings – Define whether or not DomainKeys signatures are used by default, and whether or not the users are allowed to change the default behavior for specific jobs. If defined on the application level, then these settings will be used as defaults for all accounts that do not have individual settings on a group or user level.
Figure 7-18 DomainKeys Settings
Digitally signing email messages following the DomainKeys standard is a means to assert that the message originated from the domain that is claimed in the "From:" address. The digital signature is created for the whole message, which has the additional benefit that the recipient (once he or the receiving MTA has verified the signature) can be sure that the message has not been modified on its path from the sender to the recipient. Before enabling DomainKeys support in the application, bear in mind that if DomainKeys signatures are enabled for a mail job, then all messages from the mail job must be run through a signature computation, which in most cases slows down mail job delivery.
Default Setting – Defines the default behavior for DomainKeys signing.
Mail Job Specific Settings – Defines whether or not the default behavior for DomainKeys signing can be overridden for specific mail jobs.
Settings for Hosted LISTSERV Lists – Define whether or not the default behavior for DomainKeys signing can be overridden for Hosted LISTSERV Lists.
Note: Changing the settings on this screen only applies to mail jobs that have not yet been authorized for delivery.
Auto-Archive Settings – Defines whether or not jobs will be automatically archived when the completed job reaches the “auto-archive age”. If the Auto-Archive Age field is set to 0, then the auto-archive setting is off. Leave this field empty to use the default.
Figure 7-19 Auto-Archive Settings
7.5 Deleting a User Account or Identity
To delete a user account, select the user from the Administer User Accounts and Identities screen. Click on User name, group and password, and then click on the [Delete] button. Confirmation of the selection prior to the deletion of the account is required. Any jobs, reports, sender profiles, and drop-in content elements owned by that user become “orphaned” and need to be reassigned. See Section 8 Special Administrative User Account.
To delete an identity, select the identity from the Administer User Accounts and Identities screen, and then click the [Delete] button.