Expand Collapse
Just a second...

Securing your Diffusion Cloud service from the Diffusion Cloud Dashboard

Use the Security page of the Diffusion™ Cloud dashboard to add, edit and delete principals in the system authentication store. You can also use it to define the roles assigned to these principals and to anonymous connections.

Figure 1. Security page Screenshot of the Security page of the Diffusion Cloud dashboard
Note: The 'root' principal is not shown in the Diffusion Cloud dashboard. However, this principal is present in the store and is used by the dashboard to get information from Diffusion Cloud. To ensure that your Diffusion Cloud dashboard can connect to Diffusion Cloud, do not delete or modify this user and ensure that no user-written authentication handlers deny the 'root' principal access.

Create a principal

To create a principal, click the + icon in the System Principals table. The Create Principal wizard is displayed:

Figure 2. Create Principal wizard Screenshot of the Create Principal wizard on the Diffusion Cloud dashboard

Use this wizard to specify the principal's name and password, and to select which of the default roles is assigned to the principal. Click Save to save your changes and close the wizard.

Edit a principal

To change the password of a principal or change the assigned roles, click the Edit icon ( ) in that principal's row in the System Principals table. The Edit Principal wizard is displayed:

Figure 3. Edit Principal wizard Screenshot of the Edit Principal wizard on the Diffusion Cloud dashboard

Use this wizard to change the principals's password or to change which of the default roles is assigned to the principal. Click Save to save your changes and close the wizard.

Delete a system principal

To delete a system principal, click the Delete icon ( ) in the system principal's row in the System Users table. The Delete Principal confirmation dialog is displayed:

Figure 4. Delete Principal confirmation Screenshot of the Delete Principal confirmation on the Diffusion Cloud dashboard

Click OK to confirm the deletion of the principal and close the wizard.

Change the authentication action for anonymous connections

To change the action that the system authentication handler takes when a client connects anonymously, click the Edit icon ( ) in the Anonymous Connections table. The Edit Anonymous Connections wizard is displayed:

Figure 5. Edit Anonymous Connections wizard, Deny tab Screenshot of the Deny tab on the Edit Anonymous Connections wizard on the Diffusion Cloud dashboard

Select the tab for the action the system authentication handler takes when a client connects anonymously. The available actions are Allow, Abstain, and Deny. On the selected tab, click Submit to save your selection and close the wizard.

Change the roles assigned to an anonymous connection

To change the roles assigned to a client that connects anonymously, click the Edit icon ( ) in the Anonymous Connections table. The Edit Anonymous Connections wizard is displayed:

Figure 6. Edit Anonymous Connections wizard, Allow tab Screenshot of the Allow tab on the Edit Anonymous Connections wizard on the Diffusion Cloud dashboard

Select the Allow tab. This tab lists the default roles that can be assigned to an anonymous connection. Select the roles to assign. Click Submit to save your selection and close the wizard.

This page last modified: 2019/11/22