# Director User Groups

### Users

There are four types of users in Director Console, **root**, **admin**, **SIEM engineer** and **readonly**.

{% hint style="success" %}
**Important**

* In Director Console, there is a **root** user by default.
* The **root** user can create **admin**, **SIEM Engineer** and **Readonly** users.
* The **root** user needs to create at least one **admin** user who will manage advanced Director Console functionalities like configuring entites and monitoring entities.
* The **admin** user can create other **admin** users, **SIEM Engineer** and **Readonly** users.
  {% endhint %}

<details>

<summary>Create Users</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **Users**, click **Create User**.
3. Enter a **Username**.
4. Enter an **Email Address**.
5. Under **Role**, select the role *Admin*, *Read-only* and *SIEM Engineer* for the user.
6. Select at least one **User Group**. You can select multiple user groups.
7. Enter a **Password** and confirm it. The password must be at least eight characters long.
8. Click **Create User**.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Fpr0i1oZIpL4GW7Ap69rg%2Fimage.png?alt=media&#x26;token=1e2b5309-ffde-4188-a588-bd1f2d3eef27" alt="" width="563"><figcaption><p>Create User</p></figcaption></figure></div>

</details>

<details>

<summary>Edit Users</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **Users**, click the user you want to edit.
3. Make the necessary changes.
4. Click **Update User**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FL9ncnTN7xYDn8E03kcR7%2Fimage.png?alt=media&#x26;token=df177667-642c-479b-92f4-15f8abe4d607" alt="" width="375"><figcaption><p>Edit User</p></figcaption></figure></div>

</details>

<details>

<summary>Delete Users</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **Users**, click the user you want to delete.
3. Click **Delete User**.
4. Confirm by clicking **Delete**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FgfFkNS0GJ3PCPKnBhryy%2Fimage.png?alt=media&#x26;token=08a213a1-25b1-4fb6-8759-99fda78fd229" alt="" width="375"><figcaption><p>Delete User</p></figcaption></figure></div>

You can also delete a user by clicking the (![threedots](https://docs.logpoint.com/docs/director-console-user-account-management/en/release-2.9.0/_images/threedots.png)) icon besides the user and clicking **Delete.**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FN7QME5NmNQYBfjwh0Mr8%2Fimage.png?alt=media&#x26;token=9fa63c7e-1592-4ce4-a860-2516d05b728c" alt="" width="563"><figcaption><p>Delete User II</p></figcaption></figure></div>

</details>

### **User Groups**

**User groups** control which users can access which specific pools. In Director Console, there is **All Pools** user group by default. Users in **All Pools** user group have access to all the pools available. The *admin* user is in **All Pools** user group by default. You can create a custom user group with access to specific pools.

<details>

<summary>Create User Groups</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **User Groups**, click **Create User Group**.
3. Enter **Name** of the user group.
4. Enter a **Description** to describe the user group.
5. Select at least one **Pool** which you want the user group to have access to. You can select multiple pools.
6. Click **Create User Group**.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FkuHkzHNDq0E8K9zKKHTk%2Fimage.png?alt=media&#x26;token=f21f78cd-e751-41f8-b909-084753654384" alt="" width="375"><figcaption><p>Create User Group</p></figcaption></figure></div>

</details>

<details>

<summary>Edit User Groups</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **User Groups**, click the user group you want to edit.
3. Make the necessary changes.
4. Click **Update User Group**.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FxUuDQsJghgr0jC8hCFun%2Fimage.png?alt=media&#x26;token=72bb58f7-7474-47e1-9b61-3f8fb94c78e7" alt="" width="375"><figcaption><p>Edit User Group</p></figcaption></figure></div>

</details>

<details>

<summary>Delete User Groups</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **User Groups**, click the user you want to delete.
3. Click **Delete User Group**.
4. Confirm by clicking **Delete**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FmBoXM4Eqmdh5Yed0j83r%2Fimage.png?alt=media&#x26;token=79377cd9-5dee-4759-a1ff-c884161fb266" alt="" width="375"><figcaption><p>Delete User Group</p></figcaption></figure></div>

You can also delete a user by clicking the (<img src="https://docs.logpoint.com/docs/director-console-user-account-management/en/release-2.9.0/_images/threedots.png" alt="threedots" data-size="line">) icon besides the user group and clicking **Delete**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FKymrnu5SdS97Jn0cWjp5%2Fimage.png?alt=media&#x26;token=2617953b-b76c-4116-868b-c465739ba7a0" alt="" width="375"><figcaption><p>Delete User Group II</p></figcaption></figure></div>

</details>

### Authentication Group Mapping

You can log into Director Console using LDAP and ADFS authentication. To know more about configuring LDAP authentication and ADFS authentication, go to [LDAP Authentication](https://docs.logpoint.com/director/search-and-configure/configure-authentication#ldap-authentication) and [ADFS Authentication](https://docs.logpoint.com/director/search-and-configure/configure-authentication#adfs-authentication).

To map roles and user groups with LDAP and ADFS groups, create an **Authentication Group Mapping**.

<details>

<summary>Create Group Mapping</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **Authentication Group Mapping**, click **Create Group Mapping**.
3. Select **Authentication Type**. You can either select **LDAP** or **ADFS**.
4. Under **Authentication Groups**, enter at least one authentication group of LDAP or ADFS to map it to the Director Console user role. You can enter one or more authentication groups.
5. Under **Role**, select *Admin*, *Read-only* or *SIEM Engineer* to map the authentication group into Director Console user role.
6. Select at least one **User Group**. You can select multiple user groups.
7. Click **Create Group Mapping**.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FdDncob7CQCiDqmFVIbyD%2Fimage.png?alt=media&#x26;token=a31fb281-61d5-4b96-9a50-92bc5ffaf509" alt="" width="375"><figcaption><p>Create Authentication Group Mapping</p></figcaption></figure></div>

</details>

<details>

<summary>Edit Group Mapping</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **Authentication Group Mapping**, click the authentication group mapping to edit.
3. Make the necessary changes.
4. Click **Update Group Mapping**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FuA0tgkpq9j3nfvkAPjL4%2Fimage.png?alt=media&#x26;token=59723f3e-b534-4f19-afd8-a9442cbd00cc" alt="" width="375"><figcaption><p>Edit Authentication Group Mapping</p></figcaption></figure></div>

</details>

<details>

<summary>Delete Group Mapping</summary>

1. Click **USER MANAGEMENT** from the navigation menu.
2. Under **Authentication Group Mapping**, click the user you want to delete.
3. Click **Delete User**.
4. Confirm by clicking **Delete**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FSe5F9IYkqPJGjAoEWNWL%2Fimage.png?alt=media&#x26;token=c11db1df-e476-477e-8bbe-c50caf53173d" alt="" width="375"><figcaption><p>Delete Authentication Group Mapping</p></figcaption></figure></div>

You can also delete a authentication group mapping by clicking the (![threedots](https://docs.logpoint.com/docs/director-console-user-account-management/en/latest/_images/threedots.png)) icon besides the user and clicking **Delete**

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FwMZasrNn0HTZMmucZ7iO%2Fimage.png?alt=media&#x26;token=01532a4e-474e-445d-bb35-5255751175e2" alt="" width="375"><figcaption><p>Delete Authentication Group Mapping</p></figcaption></figure></div>

</details>
