Page 1 of 1

Quick Start for Domains

Posted: Thu Dec 20, 2018 5:49 pm
by Support_Philip
All installations of GoAnywhere MFT include a Default Domain where all items belong to. Follow these steps to configure your GoAnywhere MFT installation for multiple Domains:

Create a New Domain

Use the following instructions to create a new Domain:
  • 1. Log in as an Admin User with the Security Officer role.
    2. From the main menu bar, select Users, and then click the Domains link.
    3. In the Domains page, click the Add Domain icon Add Domain link in the page toolbar to create a Domain. To edit a Domain, click the Actions icon Actions icon next to the desired Domain and then click the Edit icon Edit icon.
    4. Specify the Domain information in the appropriate boxes.
    5. Specify the File Access Restrictions for the Domain.
    6. Specify the Admin Users and Admin User Groups that can access or manage items in this Domain.
    7. Specify the Key Vaults this Domain will use for encryption. Optionally, you can allow file based keys for certificates and keys that are stored on disk.
    8. Click the Save button to add or save the Domain properties.
Assign Admin Users to Domains
Use the following instructions to assign a Domain to an Admin User:
  • 1. Log in as an Admin User with the Security Officer role.
    2. From the main menu bar, select Users, and then click the Admin Users link.
    3. In the Admin Users page, click the Action iconAction icon next to the Admin User, and then click the Edit icon Edit icon.
    4. On the Domains field, use the arrow buttons to move the Domain to the appropriate column. You can also drag and drop a Domain from one column to another.
    5. Click the Save button to save the settings.
Assign Admin Groups to Domains

By default, Admin Users are not explicitly assigned to a Domain. However, the All Admin Users Group is granted permission to the Default Domain on installation. If an Admin User's profile does not grant them permission to the Default Domain, but that Domain appears in their consolidated permissions, then the Admin User is inheriting the Default Domain from an Admin User Group they belong to (such as the All Admin Users Group). Use the following instructions to add or remove Domains to an Admin User Group:

1. From the main menu bar, select Users, and then click the Admin Groups link.
2. In the Admin Groups page, click the Action icon Action icon beside the Admin Group you wish to edit, and then click the Edit icon Edit button.
3. Select a Group Domain, and then use the arrow buttons to move the Domain to the appropriate column. You can also drag and drop a Domain from one column to another.
4. Click the Save button to apply the changes.

Viewing Items in a Domain

After a second Domain is created, the current Domain will appear in the upper-right corner of the product administrator screens (called the Domain selection tool). You can click on this Domain in order to select another Domain to switch to.
DomainSelection.png
DomainSelection.png (1.94 KiB) Viewed 7845 times
When a specific Domain is selected, only the items belonging to that Domain will appear in their respective management pages. The 'All' Domain option will display all the items across all Domains which the Admin User has permission to.

Adding Items to a Domain

When two or more Domains exist, and the Domain selection tool has the 'All' Domain selected, Admin Users will be prompted to select the target Domain when adding new Resources, Projects, Schedules, Triggers, Monitors, Web Users and Web User Groups.
SelectDomain.png
SelectDomain.png (3.61 KiB) Viewed 7845 times
Switching Items From One Domain to Another

Once an item is created in a Domain, such as a Web User, Resource, or Project, it can be moved to another Domain using the Switch Domain icon Switch Domain feature located in the item's Action icon Action menu. The Admin User that is switching the item must be authorized to the item's new Domain.

Web User Templates

Web User Templates provide a method to configure the default account settings when new Web Users are created. By defining templates that share common settings (authentication, permissions, account expirations, etc.), this can dramatically reduce the time needed to create new Web User accounts.

The Domain for a Web User Template is chosen when the Web User Template is created. Web Users that are created using a Web User Template will be a member of the Domain specified on the template.

In the example image below, an administrator has started the process of creating a new Web User. The administrator has selected the "Internal Users" template which belongs to the Sales Domain, so the Web User will also become a member of the Sales Domain.
WebUserTemplateDomains.png
WebUserTemplateDomains.png (13.87 KiB) Viewed 7845 times
Projects and Folder Permissions

When GoAnywhere is configured to use multiple Domains, each Domain name will appear at the root level of the Project Explorer. For example, in the image below GoAnywhere is configured with multiple Domains named Default, Accounting, IT, HR, and Sales.
folders_list1.png
folders_list1.png (11.7 KiB) Viewed 7845 times
The folder will appear gray to Admin Users who do not have permissions to access the Projects within that Domain:
CannotAccess.png
CannotAccess.png (1.31 KiB) Viewed 7845 times