Dell SonicWall SRA 4200 Administrator's Manual page 158

•
•
•
If using domain name is selected in the One-time passwords drop-down list, the E-mail
domain field will appear instead of the LDAP e-mail attribute drop-down list. Type in the
domain name where one-time password emails will be sent (for example, abc.com).
Select the type of user from the User Type drop-down list. All users logging in through this
Step 13
domain will be treated as this user type. The choices depend on user types defined already.
Some possible choices are:
•
•
•
Click Accept to update the configuration. Once the domain has been added, the domain will be
Step 14
added to the table on the Portals > Domains page.
158 | SRA 6.0 Administrator's Guide
mobile or pager - If your AD server is configured to store mobile or pager numbers using
either of these attributes, select mobile or pager, respectively. Raw numbers cannot be
used, however, SMS addresses can.
userPrincipalName - If your LDAP server is configured to store email addresses using the
"userPrincipalName" attribute, select userPrincipalName.
custom - If your LDAP server is configured to store email addresses using a custom
attribute, select custom. If the specified attribute cannot be found for a user, the email
address assigned in the individual user policy settings will be used. If you select custom,
the Custom attribute field will appear. Type the custom attribute that your LDAP server
uses to store email addresses. If the specified attribute cannot be found for a user, the email
address will be taken from their individual policy settings.
External User – Users logging into this domain are treated as normal users without
administrative privileges.
External Administrator – Users logging into this domain are treated as administrators,
with local SRA admin credentials. These users are presented with the admin login page.
This option allows the SRA administrator to configure a domain that allows SRA admin
privileges to all users logging into that domain.
Dell SonicWALL recommends adding filters that allow administrative access only to those
users who are in the correct group. You can do so by editing the domain on the Users >
Local Groups page.
Read-only Administrator – Users logging into this domain are treated as read-only
administrators and can view all information and settings, but cannot apply any changes to
the configuration. These users are presented with the admin login page.