Cloudwork Dashboard User Manual
Contents
1. Status By default there are three possible statuses Active Ordinary user Administrator Can access this control panel Suspended Prevented from logging in to any service After filling in these details you will be prompted to give the user a password Once you do that the new user will be ready Editing Users Editing users in this interface is not recommended if you have synchronisation running Any changes made on the directory will be reflected automatically This will remain the place to make changes to manual users or special users that are not automatically synchronised The options on the form remain the same as the Create user form which is described in detail above There are however other options that are available to use some of these will depend on the options that are available to your institution support studentnet net Change Password Silent Inspection Recovery Info Delete User Figure 5 Edit User menu Change Password This will allow you to change the password of a user If the user is being synchronised then this will force the password change back to the directory If this user is not being synchronised it will only be reflected for this system Silent Inspection Silent inspection will allow an administrator to set a temporary password that will also work for that user s account This will work for one login or 1 hour configurable whichever comes first This is designed to let an administrator to log2. To use this facility it will require a csv of the users in a format so that the system can use it Your CSV file should contain the following headings Email Username First Name Last Name Password Role For example Email User Name First Name Last Name Password Role principal example edu au principal School Principal pri2009 teacher joeblogs example edu au joeblogs joe blogs joe2009 teacher a student example edu au SN1234 Alfred Student as2010 student The following email accounts will be created principal example edu au with a password of pri2009 joeblogs example edu au with a password of joe2009 a student example edu au with a password of as2010 and a SSO username of SN12345678 Valid roles must be chosen from the following list e Student e Alum Copyright 2015 Studentnet ABN 90 001 966 892 Page 7 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet TE Cloudwork Dashboard User Manual e Teacher e Parent Copyright 2015 Studentnet ABN 90 001 966 892 Page 8 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O counwon Cloudwork Dashboard User Manual Organisational Units Organisational Units OU s are used to keep distinct groups inside the same institution into separate containers so they can be more easily administered This can be illustrated by an example structure
3. name Copyright 2015 Studentnet ABN 90 001 966 892 Page 11 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Ties Cloudwork Dashboard User Manual Groups Groups can represent Security or Distribution Groups that exists in your directory or School Management System They can also be manually created groups The can serve as email groups or attributes for use by service providers or any number of other purposes Adding Groups Groups can be added in the normal process of synchronising users in Sync Profiles or they can be added manually inside the dashboard Adding a new group Manually will show the following form New object Group Name Friendly Name Description Email Anyone can send to group 7 Permission Fields marked with are required submit Group Name This is the full name of the group If this is intended to be an email distribution group this needs to be a full email address Friendly Name This is the name that will be displayed when using the group Description This is a description that will only be visible to this dashboard for reference of administrators Email Permission This is the permissions that apply to email groups as to who can send email to them The options available are listed below e Anyone can send to group e Anyone within the domain can send to the group e Only group members can post e Only Teachers can
4. post Bulk Group Upload The other option for creating groups manually is through the bulk upload facility Copyright 2015 Studentnet ABN 90 001 966 892 Page 12 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Tiens Cloudwork Dashboard User Manual You can create a CSV file with the user account information using spreadsheet programs like Microsoft Excel or OpenOffice Calc Your CSV file should contain the following headings Group Email Address Member Email Address For example Group Email Address Member Email Address class 1 example edu au a student example edu au class 2 example edu au joeblogs example edu au class 2 example edu au a student example edu au The following groups will be created or added to class 1 a student example edu au class 2 a student example edu au joeblogs example edu au Valid roles must be chosen from the following list e Student e Alum e Teacher e Parent Copyright 2015 Studentnet ABN 90 001 966 892 Page 13 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet ceuo Cloudwork Dashboard User Manual Sync Profiles Sync profiles are the profiles used to connect to a directory and automatically synchronise users They are setup to collect both users and groups automatically every 3 minutes to collect anything that has changed in the period s
5. the users surname Figure 10 Sync Profiles User Settings Search Container This is the base OU that we will search in for user accounts This is always presented in the form of a distinguished name All OU s below this will also be searched If this is being setup for a Group Sync then this field needs to be added so we know where to collect the user that belong to that Group Mail Field This is the Attribute that contains the email address of the user Default mail Copyright 2015 Studentnet ABN 90 001 966 892 Page 16 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O cee Cloudwork Dashboard User Manual Username Field This is the username attribute that a user will use to log in to most systems with Default sAMAccountName Password Field This is the hashed password field that is saved via ADI Default hashedpassword GUID Field This is the immutable ID of the user Default objectGUID First Name Field This is the field containing the first given name of the user Default givenname Last Name Field This is the field containing the last name surname of the user Default sn Group Settings These are the settings that will allow the synchronisation of group out of the directory Group Settings Settings for synchronising groups Search OU 2014 0U Students DC schooltest C studentnet DC edu DC au Container 7 l The qualified nam
6. C POE E e E E ee cee eee ee eee eee eee 14 Ba E LVS E usenet cea resi T poet cin tans boars tcnh die ae NA 14 US SF SS a E Beep netniteoc ua Neshra tested ates poe ewes ges ent ieate sue poeetoeeit 16 FOUNS EUNE E wsasiaee seat seaneneraeatennsasasove E ananassae nai eia nearer on 17 PRON COG SOU EIN SS accu shinac arr cses conc E cous ante arercaas E 19 Appendix A Google Apps API ACCESS ssscccccsssececesececeesececeeusececausececseneceeeeesecessunecetsugeceeseneeeetes 20 Copyright 2015 Studentnet ABN 90 001 966 892 Page 2 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet G cena Cloudwork Dashboard User Manual Logging In and Out Logging into your dashboard is the first step that needs to be done to be able to administer your domain The URL for your dashboard will be issued to you when the setup if completed Going to this URL will take you to your own SSO login page or if you are already logged in you will go straight to the dashboard If you need to login then your normal login will now suffice If you do not have access please contact Cloudwork to be given appropriate access to the system Upon successfully logging in you should be presented with the following options U Logged in as suppot studentnet net log out pam Dashboard amp Users i Users Google Apps Domains Organisational Units 925 Active Users 1 Google Domains Google Apps Domai
7. STUDENTNET CLOUDWORK Studentnet Cloudwork Dashboard User Manual Make the Cloud Yours Studentnet Technical Support 1 1 2015 User manual for the Cloudwork Dashboard introduced in January 2015 with the release of Version 2 of Cloudwork Contact info studentnet net www studentnet net 61 2 2981 1626 Copyright 2015 Studentnet ABN 90 001 966 892 Page 1 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O eam Cloudwork Dashboard User Manual Table of Contents FS MVS MU OI ages tentacles nee eaten rnc tcc are beige saeco slo pe sete sve dass edocs esac ace 3 ES ah ie Lael c a 8 E gee een ten ei wee re ne ene ree nee ee ee eer ere eee rer en eeete 4 Creatine a NeW LSC enscscaucisscdrasnsesnenieceseatesaneurinnseon Sane ost es eserves gona ou ea ota eeolees 4 EOKINE U OP ate ences E E I vena E A E 6 Change PASSWOlO seseris EEE 6 Hen SC CON ee E E AER 6 REcovery I O e E ee er 7 DEE USEF r E E E ae eceanaien 7 BU USE A e E E A E E E EE 7 Dreano Ona ONE a E 9 Cr ating a new Organisational Unit eisssrsireseiirsirririin iren aE EE E E 9 Google Apps DOMAINS seisiriseriisnta rer renren r ar NE ENEA EEEE AE EENE EEES 11 Adding a Google Apps Domain s sssesesenesesresureresuererureressnrerureresunrersrereranerrureresunerrurererunereurureruneee 11 GOUD eee E ew ci puto wat E E E E A E 12 AAOH E GTO rane aa EEEE EEE 12 aroun UO ee A E E E A 12 Y
8. dwork Dashboard User Manual New User Email Must be a valid email address Users will only sync with Google Apps if Cloudwork is configured to synchronise their domain User Name The username for the user logs in with First Name Last Name Organisational 7 Unit Role z indicates the user s relationship with your organisation Status Active z Active Ordinary user Administrator Can access this control panel Suspended Prevented from logging in to any service Fields marked with are required Submit Figure 4 New User Form Email This must be a valid email address something like someone example com If you with this use to be available in a Google apps domain then it must have the same domain as the google apps domain you with to synchronise with User Name This will be the user name that the user will use to log in with Role This will indicate what role this user will have This will be sent to service providers some service providers will give different access levels based on what this value is Default dropdown values are Teacher Student Copyright 2015 Studentnet ABN 90 001 966 892 Page 5 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Tieas Cloudwork Dashboard User Manual Alum Parent Please note Currently all users that are marked at Alum or Parent are not considered chargeable in Cloudwork
9. e for the container to search for groups eg OU groups OU users C yourdomain DC com Friendly Name cn Field Group Email sSamaccountname Field Default Group Anyone can send to group Type Figure 11 Sync Profiles Group Settings Search Container This is the base OU that we will search in for groups This is always presented in the form of a distinguished name All OU s below this will also be searched Friendly Name Field This is the friendly name of the group that users will see when it is presented to them Default cn While this default is appropriate for things like email groups if you are using groups for permissions in service providers like ClickView or Complispace then it is recommended to change this to dn Group Email Field This will be the full email address of the group If the field is not in the form of an email address it will have the default domain attached to it So if it is set to samaccountname then it will be end up being saamaccountname domain edu au If all of the groups that require synchronisation have their own mail attribute then you can set this to mail NB if this attribute is blank on the group in the directory then it will not be synchronised Default Group Type This is the default group settings that will apply to email groups when they are created Options that are available are Copyright 2015 Studentnet ABN 90 001 966 892 Page 17 Studentnet the Studentnet logo Cloudwork a
10. f the previously entered user Copyright 2015 Studentnet ABN 90 001 966 892 Page 15 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Ties Cloudwork Dashboard User Manual User Settings User settings are required if the sync is set to pick up Accounts this will give us the container that we are looking for users to synchronise And the attributes that we will be looking at to be correctly set users up Most of the attribute fields will be pre filled in with defaults for Active Directory Unless you have a differing configuration then it recommended to leave them as they are In which case the only setting required will be the Search Container User Settings Information needed to collect users and group members Search OU 2014 0U Students DC schooltest DC studentnet DC edu DC au Container The qualified name for the container to look for users g OU students OU users DC yourdomain DC com Mail Field mail User attribute containing primary email address Username Samaccountname Field User attribute containing the username Password hashedpassword Field N Ea User attribute containing the password hash GUID Field objeciguid User attribute containing a unique and immutable identifier First Name givenname Field R a User attribute containing the user s given name Last Name sn Field User attribute containing
11. in as a user without having to change a user s password This feature is not on by default and needs to be specifically requested to be activated Copyright 2015 Studentnet ABN 90 001 966 892 Page 6 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O ceuen Cloudwork Dashboard User Manual Recovery Info This is the information that the user has listed for their password recovery You can view and edit what they entered so they can recover a lost password without need of administrative intervention This option will only be enabled if Password recovery is enabled for your domain Delete User This will delete the user from the Cloudwork system It will also delete the user from any service provider that Cloudwork is provisioning accounts in eg Google Apps if it is supported It will not delete the user from the directory If this user is synchronising with a directory then it will remain deleted If you wish to prevent someone from logging in through the Identity provider then it is better to set the status of the user to Suspended You will be presented with a confirmation screen before the delete is actioned Use this function with care Currently the ability to undelete users is under development Bulk User Add Under the user menu is ability to add a bulk list of users This is generally for users that will not exist in the directory such as parents
12. in the image below Users O Staff O Administration O Students O C0O2012 O 602014 O CO2016 Figure 6 Organisational Unit Side Menu You can create OU s to for manually created users to live in Most OU s will be created by the automated synchronisation process Clicking on any OU in the side menu will give you a list of the users that are contained inside that OU Creating a new Organisational Unit To create a new OU simply click on the Organisational Unit link on the sidebar This will give you a new link in the top menu to Add New Once in the add new screen it will look something like the below Copyright 2015 Studentnet ABN 90 001 966 892 Page 9 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Ties Cloudwork Dashboard User Manual New Organisational Unit Name Parent g Description Fields marked with are required Submit Figure 7 New Organisational Unit Form Name This is the name of the OU that will be displayed Parent This will determine which OU this new OU will live within For example in Figure 6 above the Administration OU s Parent is the Staff OU Description This is a description for reference of the user to be able to know what the OU is being used for Copyright 2015 Studentnet ABN 90 001 966 892 Page 10 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all reg
13. ince the last time it synchronised To setup a sync profile it is recommended you consult with Cloudwork to make sure you will be adding the correct information Base Settings Base settings will determines what server we are connecting to and what authentication we are using to do the synchronisation with Base Settings Description 2016 Students A short description to identify this sync profile Sync Type Accounts g Choose whether this sync profile should sync user accounts groups or both Role Student g Users created with this syne profile will have the selected role Ldap Server Idaps schooltest studentnet edu_au IP address or host name of the directory server to collect information from Please note that password reset will ONLY work over LDAPS Ldap User CN St Ldap CN Users DC schooltest C studentnet DC edu DC au Usemame to bind to when collecting information from the server This should be a distinguished Aarne Ldap password Password l Password to use when collecting information from the server Figure 9 Sync Profile Base Settings Description This is only for the administrator s reference Copyright 2015 Studentnet ABN 90 001 966 892 Page 14 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O ceuen Cloudwork Dashboard User Manual Sync Type Determines what objects are being synchronised Option
14. istered trademarks of Studentnet coupon Cloudwork Dashboard User Manual Google Apps Domains This menu item allows you to view and edit your Google Apps Domains Adding a Google Apps Domain The add screen will require some details about your Google Apps domain Once this is completed there is an additional step that needs to be done for it to correctly be able to communicate with your Google Apps Domain This is a manual Step required by Google to complete that we need to do at the server side end You can request we do this for you or you can follow the instructions in Appendix A New Domain Domain Name Administrator Account a a te The Google Apps account Cloudwork will use to maintain users and groups in this domain This needs to be a full email address Maintain Users Enable Cloudwork to create new users in or push name and email address changes to Google Apps Maintain Passwords Enable Cloudwork to pass password changes to Google Apps E Maintain Groups Enable Cloudwork to create and maintain groups in Google Apps Maintain Shared Contacts Enable Cloudwork to create and maintain shared contacts in Google Apps Fields marked with are required submit Figure 8 Google Apps Domain Add Domain Name This is the Google Apps domain Administrator Account This needs to be a Super Administrator account no password details are required just the full email address of the account
15. l attribute of user does not contain a valid email address Eg for a domain all users at school schooltest studentnet edu au have the mail attribute in the format username school local While this is in the format of an email address it will not work as an email address In this case if Force Mail Domain is checked then it will import that email address as username schooltest studentnet edu au instead Care needs to be taken when using this flag Copyright 2015 Studentnet ABN 90 001 966 892 Page 19 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Cloudwork Dashboard User Manual Appendix A Google Apps API Access https www googleapis com auth admin directory group https www googleapis com auth admin directory orgunit https www googleapis com auth admin directory user https www googleapis com auth admin reports audit readonly https www googleapis com auth admin reports usage re adonly https www googleapis com auth drive https www googleapis com auth spreadsheets ht tos www googleapis com auth apps groups settings https spreadsheets google com feeds http www google com m8 feeds Copyright 2015 Studentnet ABN 90 001 966 892 Page 20 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet
16. nd Make the Cloud Yours are all registered trademarks of Studentnet G eens Cloudwork Dashboard User Manual e Anyone can send to group e Anyone within the domain can send to the group e Only group members can post e Only Teachers can post Copyright 2015 Studentnet ABN 90 001 966 892 Page 18 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Tiens Cloudwork Dashboard User Manual Advanced Settings Advanced settings revolve around the setup of email domains and other such issues that arise from mail attributes that may not have enough information It is recommended that you consult with Cloudwork about making adjustments to these settings Advanced Settings These settings are only required if your users or groups do not have complete or correct email addresses Domain schooltest studentnet edu au The email domain for groups If Force Mail Domain is selected user accounts created or updated by replace the email domain with this domain E Force Mail Domain Figure 12 Sync Profiles Advanced Settings Domain This will be the default domain of any email addresses that need to be created for either users or groups This will be used if the group does not have a proper email address in it s set Group Email Field Force Mail Domain This option will force all users to have the set domain as their email domain This is mainly used of the mai
17. ns Add a User Add Domain Groups Restore recently deleted users i Shared Contacts i aa Sync Profiles Groups Manage Org Units 11 Groups Add an Org Unit Add a Group Sync Profiles Shared Contacts Manage User and Group Sync Create a new sync profile Figure 1 Dashboard Overview Copyright 2015 Studentnet ABN 90 001 966 892 Page 3 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet O Ties Cloudwork Dashboard User Manual User Management Users can be accessed through the front panel or via the side menu Users 929 Active Users Add a User Figure 2 User Menu Clicking on the active users link or the Users side menu will give a listing of all of the users in the system Creating a New User You should only need to manually create users for administrative purposes to this dashboard or to create special users that are not synchronised by normal processes To create a new user simply click on the Add new user link either on the home page or on the top menu after clicking on Users in the side menu Users List Add New Upload Manage Organisational Units Search submit Figure 3 User Top Menu You will then be presented with the User Creation screen Copyright 2015 Studentnet ABN 90 001 966 892 Page 4 Studentnet the Studentnet logo Cloudwork and Make the Cloud Yours are all registered trademarks of Studentnet G OU OR Clou
18. s available are e Accounts e Groups e Both It is recommended that Sync Profiles are setup to do either accounts or groups only Using the Both option is a more advanced option Role This will be the default user type that anyone inside this profile will be imported with Available options are e Student e Alum e Teacher e Parent LDAP Server The is the address of the LDAP server it can be in the form of an IP address or a domain name To use a non standard port simply put the port on the end of the domain IP eg to connect to the server on port 1234 you would enter Idaps schooltest studentnet edu au 1234 If you do not put Idaps at the start we will assume Idaps for the protocol If you wish to use Idap you must include that in the domain IP that you put into this field While we support it we do not recommend it NB for Password Reset to work LDAPS MUST be in use LDAP User This is the user that has permission to be able to connect to the server It is recommended that this be a user specifically designed for this connection This is in the form of the distinguished name of the user and will look something like the below example CN St Ldap CN Users DC schooltest DC studentnet DC edu DC au This user will need read access to the domain that it will be connecting to and if Password Reset is enabled it will need the Reset Password permission on the domain also LDAP Password This is the password o
Download Pdf Manuals
Related Search