OK, let's look at uses now.
So, server admin users, OK, there's my default user when I first created Carafano.
And that's the user I've been using throughout.
I can inspect it.
I've given it a email address.
I can manage it's password and it's a global professional admin.
This means it can manage everything in file, even other organizations, for example, down here.
We'll look at that in light of video.
So I've got my main dog there, though I can also force log out from all devices.
If I want it now, we can get other users.
So going back to users, we can create users with reduced permissions.
So new user.
I'm going to call it user one.
And give it a password.
Be anything you'd like, you have to give it an email or username.
It's just easier to give it a username, otherwise get diminishing mouse as well.
I'm just going to copy the name can be anything you like.
Place a crate user.
OK, very good.
So use a one.
It's never logged in.
It's a viewer for the main dot org organization, which is just the default organization that was created
when I installed Bafana.
I can change the role to be either an editor or even an admin for Maine dot org, or I can make it a
global profondeur admin so I can do absolutely everything, but I'm not going to do that.
So it's just a viewer.
OK, so that now means a user called user one with a password.
Whatever I put there can log in.
So on a different browser, I'm using Google Chrome here so that the cookies don't get shared between
the Edge browser.
Here I can log in as user one and enter my password, then log in.
OK, it has read only access to each of the dashboard, so if I go to dashboards browse, I can look
at all the different dashboards that are created.
Each and every single one of them has viewer permissions for any user with a view or permission.
So this user here, user one, is a viewer for my network.
So this user can view the dashboards.
OK, so looking at User 1's user interface user one, it's very restricted.
Doesn't have as many options on the left there as dashboards browse, and it can see all the dashboards
in the system because each of these dashboards has the viewer permission enabled for users with the
viewer permission.
So for example, folks, there we go.
OK, so we can prevent users with the video permission from viewing this dashboard, for example.
So going into my system, where on the admin by going to dashboards browse and I look for VAR locks,
the I'm logged in as my admin user on the left.
Here I can go to Dashboard Settings Permissions and if I look at the default permissions, these are
the different roles that can view this VAR log dashboard so ED can edit, which is one of the roles
and the viewer can view.
So I can just say I don't want viewers to get a view this dashboard anymore so I can just delete it
like that and then just press save, dashboard save.
Now, going back to my user with the View Arrow, if I just refresh that, they can no longer see logs
so they go to dashboards, browse VAR logs doesn't exist in their system.
So when you create a dashboard in the system so dashboards browse any dashboard, say, for example,
node exporter permissions, these are the default roles that are enabled.
So be aware that if you're creating dashboards and you don't want people to see them by default, you
have to manually remove those roles.
So, for example, I'm going to remove the editor role and view a role.
So only admin role now can see this dashboard.
So I'll just save that going back to my other user.
One Log in if I refresh this page, the node exporter dashboard is no longer there.
OK, so dashboard time.
OK, so if I had users and I'd given user one the editor role, so would be a very similar situation.
Use one.
Now, if it views any dashboard, not only can you view the dashboard, it can also edit the dashboard.
So when you're the viewer, you don't get the added option.
You don't get a lot of these other options as well, or even remove or just share that.
So this change it back to a viewer say, OK, so back as my user, one user reload that if I look at
these dropdown options, I want to view, share, inspect or more.
OK, so they go.
You can create many users so I can create another one user to use a two on that, and I can, of course,
manage its details also in the configuration option here.
We have users it's a reduced functionality list, but it only applies to users in the org that you're
managing at the time.
So I'm managing the mine dot org.
In this case, I only have one set up in the system so far so I can see all those users and individually
change them.
Therefore, I wanted to make them both viewers.
OK, so you can experiment with that quite different uses, if you like.
OK, so there's another way of getting users into the system that's using the invite option here.
So if you have some type set up correctly, you can send an email, for example, I'm going to add min
plus test one.
This be code dot it.
I'm just creating a fake email address there.
You should use your own.
You only have one email address.
You can put in a plus and then anything you'd like.
And a lot of email providers will still accept that email, but you'll be a individually in your inbox.
If you want to do something like that anyway, I'm going to just add this user using this invite user
panel submit.
OK, so if I go to pending invites now, there's a user waiting to respond in any way.
If your email provider allows that email to be sent, then your user will have an invite in their inbox.
Anyway, that's an option for you to invite users.
Another way of getting users into the system is through changing some system settings.
OK, so you now Crafar any we can set a property to a scroll to the bottom.
For Allow sign up.
So a microphone, a server, I'm going to edit the profanity so sedate, sycophantic or fan any insult
if I just search for the words, sign up.
I'm going to use Control W to do search their sign up.
OK, so fanned it.
Allow sign up.
So remove that comment.
Now control X to say yes and to restart.
OK if on a server restart.
Now, going back to my other log on where I got use the one, I'm just going to sign out there now at
the bottom of the login page, there's now a sign up option.
So you could give your co-founder address to some say had just go there and then sign up and they could
then sign up, for example.
This method is asking for a email address.
You could say user three at example dot com.
Submit.
OK, and that user has now logged on, so use a three year example dot com and you can see all the dashboards
with the viewer role enabled.
OK, so far metrics, for example, but this viewer can't edit this dashboard and he has those options.
I can't even resize or move things around.
They have very reduced functionality.
They can change their preferences, for example.
There UI color.
Or their default home page of their options of their time zone as they want anyway.
We just saw sign that user out, OK, now there's also another way we can allow users to enter the system
and that is anonymously.
If I go back to the Gryphon in the 80s, sycophantic often any and I search for missing control w or
dot anon, I get options for an anonymous user.
So this comment it out.
Let's enable it and make sure it stays true because by default we will say False Control X to save this
and restart.
Now, after about 10 seconds or so, if I have visit this URL again, just this big code dot net, it's
logged me straight without actually giving me a login option so users can now browse any dashboard they
like, for example, because all of these dashboards still are set as allowing the view a roll axis
so very good.
This is very similar to how often a play is set up.
Except Refine a play also has the options to edit, but you can't save your changes on the final play,
unlocking it edits a could on your own version.
OK, so on this anonymous user, we're not actually logged in yet, but we could sign in if we wanted
to.
And sign up even taste that several different ways of managing users in Havana.