Centralized Technician Management
Log360 supports centralized management of user roles for all its components which include ADAudit Plus, EventLog Analyzer, Cloud Security Plus, Exchange Reporter Plus, DataSecurity Plus, Log360 UEBA, ADManager Plus, and M365 Manager Plus. When a user is declared as a technician, they are provided with the permissions to configure specific areas of Log360 and its various components. A user can be assigned as a technician of a single domain, or multiple domains.
Log360 allows adding users in two user groups, admin and operator.
Admin
An admin has full control over the entire application by default.
Operator
An operator can audit the operations taking place in the application.
How to add a new centralized technician?
A new centralized technician can be added with authentication by two methods - product authentication and Active Directory authentication.
To add new users with authentication by product, follow the steps given below:
- Under the Admin tab, navigate to Administration → Manage Technicians.
- Then click on the + Add New Technicians button on the top-right corner.
- Enter a name for the technician in the User Name field. You can additionally add a description by clicking on the Description button.
- Enter a new password and confirm it in the respective fields.
- Enter the email address of the technician in the Email ID field.
- In the Roles drop-down box, choose the role(s) you want to assign to the technician. The permissions applicable to the selected role will be assigned to the technician.
- In the Delegate to section, select the components to which you want to add the new technician, by ticking the respective checkboxes. For each component, select the roles and domains to be assigned in the appropriate fields.
- Complete the add user operation by clicking on the Add button.
To add new users with authentication by Active Directory, follow the steps given below:
- Under the Admin tab, navigate to Administration → Manage Technicians.
- Then click on the + Add New Technicians button on the top-right corner.
- Under Authentication Type, select AD Authentication from the drop-down menu.
- In the Select Users field, select the required users in your AD by clicking on the button.
- Select the Role for Log360 from the drop-down menu.
- In the Delegate to section, select the components to which you want to add the new technician, by ticking the respective checkboxes. For each component, select the roles and domains to be assigned in the appropriate fields.
- Complete the add user operation by clicking on the Add button.
Note: Previously, auto addition of domain technicians in Exchange Reporter Plus and M365 Manager Plus was initiated when the user logs into Log360 using their AD credentials. Now, users are required to create domain technicians separately in each component, or from the centralized technician dashboard.
How to modify an existing technician from the centralized dashboard?
To edit the information of an existing technician, follow the steps given below.
How to delete an existing technician from the centralized dashboard?
To delete an existing technician, follow the steps given below.
- Under the Admin tab, navigate to Administration → Manage Technicians.
- Choose the technicians to be deleted by ticking the checkbox corresponding to the technician's name.
- Click on the Manage button above the table and select Delete from the drop-down menu.
- Confirm the deletion by clicking Yes on the warning pop-up message.
- The technician is now deleted.
How to enable or disable an existing technician?
To enable or disable an existing technician, follow the steps given below.
- Under the Admin tab, navigate to Administration → Manage Technicians.
- Choose the technicians to be enabled/disabled by ticking the checkbox corresponding to the technician's name.
- Click on the Manage button above the table and select Enable or Disable from the drop-down menu.
- The technician is now enabled/disabled.
To enable or disable an existing technician only for a specific component, follow the steps given below.
Log360 component versions that support centralized technician management
The following are the components that supports the centralized technician management feature.
- ManageEngine ADAudit Plus (from build number 7009)
- ManageEngine EventLog Analyzer (from build number 12214)
- ManageEngine Cloud Security Plus (from build number 4130)
- ManageEngine Exchange Reporter Plus (from build number 5615)
- ManageEngine DataSecurity Plus (from build number 6061)
- ManageEngine Log360 UEBA (from build number 4033)
- ManageEngine M365 Manager Plus (from build number 4502)
Note: Limited license of ADManager Plus does not include the centralized technician management feature.
Management of technicians from the component
Though each component of Log360 has its own technician management settings, the technicians are advised to be managed from the centralized technician page. This is because you get a more comprehensible overview of the different technicians and their roles in different components when you look at them from the centralized dashboard.
Note: Addition of non-domain technicians from a component product will not synchronize with Log360. Please add non-domain technicians from Log360's centralized technician management dashboard.
Frequently Asked Questions
1. What happens to the technicians which were existing/created in the components?
The domain technicians will be synced with Log360. The user will also have operator privilege in Log360.
For M365 Manager Plus, existing technicians available during bundled licensing will have operator extended role, which is also the bundled role. Upon purchasing a full license, you can change roles of existing users.
2. What will happen to the technicians that are modified directly in the component's console ?
The changes would be synced with Log360.This does not include changes made to passwords.
3. Why is Active Directory Manager Plus (ADMP) not supported?
In order to use ADMP, you need to have the full version of the product. You can upgrade to the full version here:
4. I have created a Product Technician in component products, but I am not able to view it in Log360 Technician page.
Product Authenticated technicians created in component will not be synced to Log360. Only AD Technicians created in component will be synced to Log360. You can create Product Technician from Log360 console.
5. Why are only a few roles shown in Add/Edit technician page for M365 Manager Plus and Exchange Reporter Plus?
When M365 Manager Plus and Exchange Reporter Plus are in the limited version, only Operator Extended and Log360User role can be managed respectively. Other roles can be managed only in the full version which you can upgrade to here:
Troubleshooting
1. The component product has been updated to the required build version but an error message is shown.
Solution:
- Under the Admin tab, navigate to Administration → Log360 Integrations.
- Update the integration settings for the required component.
2. The technicians, roles, and delegations are not in sync.
Solution:
- Under the Admin tab, navigate to Administration → Log360 Integrations.
- Update the integration settings for the required component.
3. Error status returns -'AD user not found' or 'User not discovered'
Solution:
- Go to the delegation tab inside the product.
- Refresh the AD user selection
4. Error status returns 'License Exceeded' when you add more technicians.
Solution:
5. Error returns 'unable to communicate with the component.
Solution:
- Under the Admin tab, navigate to Administration → Log360 Integrations.
- Update the integration settings for the required component.
6. Error status returns 'Unknown Error Occurred'
Solution:
7. Error returns 'No products are integrated'.
Solution:
- Under the Admin tab, navigate to Administration → Log360 Integrations.
- Next, integrate any supported product.
8. Error returns 'No products are supported'.
Solution:
- Check if the integrated product is in its latest/supported version.
- Next, check if the integrated product belongs to the following build numbers.
- ELA - 12214
- UEBA - 4033
- ADAP - 7009
- M365 - 4502
- DSP - 6061
- ERP - 5615
- CSP - 4130