Users can be created locally with NAC, but are usually synchronised via an external Enterprise data source such as Active Directory.
The Key fields are the
- NAC GUI rights: Administrator, Edit mode, Readonly (Otherwise, no access)
See also the WinGUI installation.
A new field 'Gui Vlan Rights' was introduced in v3. This restricts the Vlans which the GUI users can select from in the Edit tab. This improves ease of use (a specific user can be shown only the vlans relevant to him/her) and security (if there are sensitive vlans that should not be visible to all). The field contains a comma separated list of vlan indices (not vlan numbers).
This field can only be changed if you have Administrator rights.
The Comment field is not synchronised with Directories, so its information stored locally only on the user stored in NAC.
The Manual Directory Sync is used for forcing a single user synchronisation, for advanced administration only.
The queries on the right provide a list of NAC configured administrators, those who can make changes, and the list of users with read-only access.