Groups; Access Controls; Security Templates - Lexmark 13B0503 - X 364dw B/W Laser Administrator's Manual

Groups

Administrators can designate up to 32 groups to be used in association with either the Internal accounts or
LDAP/LDAP+GSSAPI building blocks. For the purposes of Embedded Web Server security, groups are used to identify
sets of users needing access to similar functions. For example, in Company A, employees in the warehouse do not
need to print in color, but those in sales and marketing use color every day. In this scenario, it makes sense to create
a "Warehouse" group, and a "Sales and Marketing" group.

Access Controls

By default, all device menus, settings, and functions come with no security enabled. Access Controls (also referred
to in some devices as "Function Access Controls"), are used to manage access to specific menus and functions or to
disable them entirely. Access controls can be set using a password, PIN, or security template. The number of functions
that can be controlled varies depending on the type of device, but in some multifunction printers, over 40 individual
menus and functions can be protected.
Note: For a list of individual Access Controls and what they do, see "Menu of Access Controls" on page 29.

Security Templates

Some scenarios call for only basic security such as PIN-protected access to common device functions, while others
require tighter security and role-based restrictions. Individually, building blocks, groups, and access controls may
not meet the needs of a complex security environment. In order to accommodate users in different groups needing
access to a common set of functions such as printing, copying, and faxing, administrators must be able to combine
these components in ways that give all users the functions they need, while restricting other functions to only
authorized users.
A Security Template is a profile constructed using a building block, or certain building blocks paired with one or more
groups. How they are combined determines the type of security created:
Building block
Internal Accounts
Internal Accounts with Groups
Kerberos 5
LDAP
LDAP with Groups
LDAP + GSSAPI
LDAP + GSSAPI with Groups
Password
PIN
Each device can support up to 140 security templates, allowing administrators to create very specific profiles—or
roles—for each access control.
Type of security
Authentication only
Authentication and authorization
Authentication only
Authentication only
Authentication and authorization
Authentication only
Authentication and authorization
Authorization only
Authorization only
Using security features in the Embedded Web Server
6