IBM Navigator for i - Access Authorization Options

Content

• Serviceability > Connection Properties topics:
  • GUI Preferences
    • TLS Override
    • Localhost Override - Navigator for i in Cloud environment
  • Authentication: Access Authorization
• Function Usage IDs page (Security).  This will explain how to use Function Usage IDs to prevent users from accessing any or specific Navigator components.

1. Use the same user profile and password as was used when you sign in to the GUI node (default) 
2. Prompt for user and password on first access of an end-point node 
3. Save the specified user and password in an encrypted file on the GUI node and use the values saved in that file for future end-point IBM i nodes.  This file is encrypted and is only accessible by the signed on user, but this method is still less secure and therefore not recommended. 

• Use GUI login information to connect to all nodes on the dashboard (default) - The user is prompted for their IBM i user profile and password on the main Navigator sign-in page. The credentials are used to establish access to any endpoint already on the dashboard OR add an endpoint that the user wants to access, monitor, and manage. This user and password is not saved anywhere other than the application runtime.  In order for a user to access an endpoint system, they must have the exact same user profile name and password on that endpoint.  Note that the functions and access for a user profile on any endpoint can vary since the credentials for that user on that endpoint are used to determine access and function availability for managing the system. 
• Prompt for login information every time a connection to a node is made.  Each endpoint node defined on the dashboard remains in a 'locked' access state until the user takes an action to access or manage that endpoint.  For example, once a user double-clicks a dashboard tile to manage that endpoint, they are prompted for a user profile and password for that specific endpoint system.  The Navigator interface uses those specified user credentials only for that endpoint. The Navigator interface continues to use the specified user profile and password only during this browser session.  
• Prompt for login information and store it for future use.  This option is not recommended in secure environments.   The user is prompted once for the user and password for the endpoint node. The Navigator interface then saves that user profile and password information only on the GUI node in an encrypted file for future use.  Only the GUI-node user profile has access to this file and can decrypt the user profile and password for the registered end-point nodes. To update the password on an end-point node, the user needs to right-click the tile on the dashboard.  Click the "Edit Node Information" page to update the user and password values saved in the file.