Page Comparison

The following article provides details on the user types and their roles in IGEL OS. You can configure passwords for the user types to protect your endpoint devices against unwanted changes. 

...

Configure the administrator password to create the password protection for theIGEL Setup. You can also configure the setup administrator and the setup user to allow additional access to the IGEL Setup. For more information, see Setup.

...

• Administrator: If configured, the administrator password protects the following critical actions/areas from unauthorized access:
  • IGEL Setup
  • Reset to factory defaults boot mode. (For more information, see Boot Menu.)
  • Accessing the local terminal as root. (For more information, see Terminals in IGEL OS.)
  • Virtual console access. (For more information, see Access Control.)
  • sessions, for which Administrator is set under Password protection. (For more information, see Starting Methods for Apps.)

...

• • Unlocking the screenlock. (For more information, see Options 2Screenloock/Screensaver Options in IGEL OS12.)
  • Secure Shell  (SSH). (For more information, see SSH Access in IGEL OS 12.)
    
    

• Setup administrator : If configured, the setup administrator can access the following with a password:
  • IGEL Setup
    
    
• Setup user : If configured, the setup user can access the following with a password:
  • IGEL Setup. (Unlike in OS 11, in OS 12 the Setup User can access all parts of Setup.)

  • sessions, for which Setup user is set under Password protection. (For more information, see Starting Methods for Apps.)

    Warning
    If you configure a Setup user in OS 12, they have effectively the same Setup permissions as the Administrator. This includes running Custom Commands (command execution with privilege escalation).

    
    

• User : If configured, the user can access the following with a password:

• • the terminal session as user. (For more information, see Terminals in IGEL OS.)

  • sessions, for which User is set under Password protection. (For more information, see Starting Methods for Apps.)
    

    Info

    You can also use the  User password for starting the screenlock:  User Interface > Screenlock / Screensaver >   Starting Methods for Session > Password protection. For details, see Screenlock / Screensaver. However, note the following:   The  User  is not the same as the local user configured under Security > Logon > Local User. For unlocking the screenlock, the local user password (not the user password) is used. For details, see Local User and Options 2 Screenloock/Screensaver Options in IGEL OS12.

    
    

    
    

• User account for remote access: If configured, the ruser can access the device via Secure Shell  (SSH). (For more information, see SSH Access in IGEL OS 12.)

Administrator

Use password