beautypg.com

Security and user accounts, Configuring media access security for k2 bins – Grass Valley K2 Media Client System Guide v.3.3 User Manual

Page 137

background image

June 9, 2009

K2 Media Client System Guide

137

Security and user accounts

Security and user accounts

To provide a basic level of security, the K2 Media Client ships from the factory with
three pre-configured Windows operating system user accounts, with login usernames
Administrator, K2Admin, and K2User. From these accounts, the K2 system enforces
security levels, as shown in the following table.

Using standard Windows operating system procedures and the Microsoft
Management Console, you can set up additional local users and groups, as well as
domain users and groups. Once these are set up, they are available to K2 security
features. In this way you can set up a security framework to match your site’s unique
security requirements.

Configuring media access security for K2 bins

The permissions you set on a K2 bin restricts access to the media in the bin via
AppCenter operations, via FTP, and via protocol control of channels.

Security on K2 bins is enforced through the media database. It is not enforced through
the Windows file system. Even though the configuration for permissions on K2 bins
appears similar to that for Windows folders, do not confuse the two types of security.

Windows
administrator

K2
administrator

K2 user

Unknown user
(a login that is not one of
the default accounts)

Login

Administrator

K2Admin

K2User

N/A

a

a.

The unknown user, like all others who access the K2 system, must have a valid Windows login for the
K2 Media Client or the control point PC through which the K2 system is being accessed.

Password

(case sensitive)

adminK2

K2admin

K2user

N/A

AppCenter

Configuration

Manager

Full access

Full access

Can view

Can’t access

AppCenter

Full access

Full access

Full access;
requires an
account on the
K2 Media
Client(s)

Can view channel suites,
channel status, on-line
help and System Status
pane. Can export logs.

Storage Utility

Full access

b.

Full access

Can’t access

Can’t access

K2 System

Configuration

application

Full access

b

b.

For more information about Storage Utility or the K2 System Configuration application security, see the
K2 Storage System Instruction Manual.

Full access

Can’t access

Can’t access

Windows

Operating

System

Full access

Limited access
(based on
Windows login
privileges)

Limited access
(based on
Windows login
privileges)

Limited access (based on
Windows login
privileges)