5 2 0:Managing Locations
Overview
|
Visit SEP sesam YouTube Channel for latest videos and webinars. |
|
Check FAQ to find the answers to most common questions. |
|
Problems? See the Troubleshooting Guide. |
|
If you are using an older SEP sesam version, refer to Documentation archive. |
In SEP sesam, clients can be logically grouped into locations to simplify management of multiple clients. Locations represent groups of clients based on various criteria, such as operating system, data type, geographical location or any other units that may be required.
Locations can be organized hierarchically, with multiple sub-locations under a parent location, providing a clear structure for managing clients in complex environments. They can be especially useful to organizations with multiple offices or departments, enabling centralized management of distributed clients.
Grouping clients into locations offers several advantages, including the ability to update multiple clients simultaneously. For example, you can update all clients within a specific location or filter updates based on the operating system, such as only updating Windows or Linux clients. Locations also enable you to assign credential sets and ACL permissions more efficiently. By grouping clients into a location, you can apply a single credential set to all clients in that group, reducing redundancy and improving security. Similarly, you can manage access rights collectively using ACLs, making it easier to control who can view or modify resources within that location.
Key features
- Clients can be grouped into locations based on OS, data type, geographical location, or other criteria.
- Locations can be organized with sub-locations, creating a tree-like structure for easier management.
- SEP sesam includes a pre-configured location called LOCAL.
- Simultaneous updates of multiple clients within a location, which can be additionally filtered for specific operating systems (e.g., Windows or Linux).
- Credential sets and permissions (ACLs) can be configured for entire locations or individual clients.
Viewing locations
In the Web UI, under Infrastructure -> Clients, clients are presented in a flat client view with locations displayed in a column, which can be used to sort the table by location.
In the GUI, locations are displayed in a tree view under Components -> Clients, making it easy to monitor the status of clients grouped under each location.
Create a location
To create a new location, in the GUI go to Main Selection -> Components -> Clients, and then click on New Location. Alternatively, you can also right-click a location in the tree view and then click on New Location.
Define the settings as required. For detailed explanations of the available options, refer to section Location properties.
To configure a user account for the location, which will be used to access all clients in this location, you can select or configure a credential set in the tab OS Access. For details, see section Configuring client access credentials.
After you have created a location, you can start adding clients to it. For details, see Adding a New Client.
Location properties
When creating or modifying a location, the following options are available to customize its properties.
General properties
| Name | Enter a name for the location. |
| In | Optionally, to create a hierarchical structure, you can select a parent location from the drop-down list of configured locations. The new location will then be added as a sub-location under the selected parent location. |
| Description | Optionally, enter a description of the location. |
| Contact | Optionally, add the contact person information for the location. |
| Note | Optionally, add any comments or additional information related to the location. |
Screenshots
Configuring client access credentials
When configuring a location, you can set up a credential set that is used for accessing all clients in that location, instead of specifying credentials for each client individually. Credential sets are combinations of usernames and passwords used to authenticate access to clients during installation, backup, or restore operations. You can choose to use either a local Administrator account (HOST\USER) or a domain Administrator account (DOMAIN\USER).
Once defined, credential sets can be reused without exposing the password, helping to limit direct access to sensitive credentials. A credential set can be assigned to a specific location (for example, all virtual machines on a hypervisor), or configured for an individual client.
The OS Access tab enables you to set the required credential set for the clients in that location. For more information, see also Managing Credential Sets.
OS Access
| Credential set | Select the credential set with appropriate user rights for accessing the clients in this location. In case the required credentials are not already configured, you can create a new credential set. For details, see Managing Credential Sets. |
| User | The username in the format DOMAIN\USER for domain accounts or HOST\USER for local accounts. |
| Password | Password for the selected user account. |
| Verify password | Repeated password for the selected user account. |
Screenshots
Modify a location
To modify the details of an existing location, right-click it and then click on Properties. Make the changes as required, and then click OK to save the changes and close the Location Properties window. Note that you can also click Apply to save the changes and continue editing the location.
To move a location under a different parent location, in the In drop-down list select a location, and then click OK to move the location and close the Location Properties window.
|
Note |
| To move a client under a different location, you have to modify the client. Right-click the client you want to move and then click on Properties. In the Location drop-down list select a different location, and then click OK to move the client and close the Client Properties window. For more details, see Adding a New Client. |
For a configured location, an additional tab Permissions is available, which enables you to set an access control list (ACL) for a location. An ACL is a set of permissions assigned to an object (such as a client, location, or backup). ACLs define which users or user groups are allowed or denied specific operations on a given object. For more information, see also Using Access Control Lists.
For example, you can configure the "Access" permission to explicitly allow or deny access to a location to certain users or groups. Setting this permission to "Deny" can restrict specific users from accessing clients in a particular location. This enables you to precisely define which users or groups can access specific resources in the SEP sesam environment.
Permissions
| Groups or usernames | This section allows you to select users or user groups, to which you want to assign specific permissions for this location. To assign users or groups, click Add and choose from the available list. The users and groups shown in the drop-down list are those configured in SEP sesam GUI under Configuration -> Permission Management. You can also remove a user or a group from the object by selecting the required entry and clicking Delete. |
| Permissions | The Permissions section displays the list of available permission types (e.g., Access) that can be assigned to users or user groups. For each user or group, you can choose to either allow or deny specific permission. To assign permissions, first select the user or group from the list, then check the appropriate box for each available permission to define their access rights. |
Screenshots
Delete a location
Before you delete a location, ensure it is no longer in use. You can delete a location only if it is not assigned to any clients. In case the location contains SEP sesam clients, move them to a different location or delete the clients. Once empty, select the location and click Delete. Confirm the deletion to remove it permanently.
See also
Managing Credential Sets — Managing Clients — Adding a New Client — Grouping SEP sesam Objects