Users and Groups

Users or Groups modes

Once the adoption procedure is completed, you must allow users access to the remote network. You can manage users in User Mode or Group Mode.

Users mode (stand alone)

This mode is normally suitable for IT purposes such as traditional corporate VPNs, working from home, road warriors (remote sales people), remote assistance for Manage Service Providers (MSP), and remote access to control IP devices (camera, alarm, solar, energy applications). This is the default mode when you first adopt the EZ BoxTM. Each EZ BoxTM has its own users and users need to be configured on each EZ BoxTM.

In the examples below USER01, USER02 and USER03 have been created two times. One time for EZBOX1 and another time for EZBOX2:

<iocon></iocon> Users user diagrams

Groups mode

This mode is recommended for all scenarios where one or more teams need to access one or more EZ BoxTM devices. With Group Mode, you will be able to organize users in groups, and assign the groups to a specific EZ BoxTM. If you remove one user from a group, this user will be automatically removed from all the EZ BoxTM that he has been granted access to. We recommend using the Group Mode if you need to manage a growing fleet of EZ BoxTM. This will save you lots of time in granting access to newly adopted EZ BoxTM. The Group Mode is highly recommended for industrial applications where many EZ BoxTM are installed in the field.

<iocon></iocon> Users group diagram

The selection of User Mode or Group Mode is done at the account level. This means that all EZ BoxTM that belong to the same account will be managed on the same mode. It is not possible to use both mode at the same time within the same account.

If you choose to adopt the “Group Mode”, you can always go back and disable it at any time.

Please note that users who are not assigned to any group will be deleted when you disable the "Group Mode" feature.

By default the "Users Mode" method is configured for a new account.

Enable Groups mode

To enable Groups mode:

  1. Click Enable Groups menu.
  2. Click Enable Groups Mode button and confirm to enable groups.
<iocon></iocon> Users Enable Groups

You can always go back and disable this feature in the future. Please note that users who are not assigned to any group will be deleted when you disable the "Group Mode" feature.

The following new menu will appears in the management interface:

<iocon></iocon> Users Groups menu

When the Group Mode is enabled for the first time, a default group with the same alias of the EZ BoxTM is created for each EZ BoxTM. The users that had access to the EZ BoxTM will automatically be assigned to the newly created group.

Disable Groups mode

To disable Groups mode:

  1. Click My users to expand the menu.
  2. Click Disable Groups to open the section.
  3. Click Disable Groups Mode to disable the Groups Mode.
<iocon></iocon> Users Disable Groups

You can always go back and enable this feature in the future but your existing groups will not be saved. Please note that users who are not assigned to any group will be deleted when you disable the "Group Mode" feature.

New user (Users Mode)

At least one EZ BoxTM device needs to be adopted in order to create or manage the users. Please check the Adoption section for further details if you need to adopt an EZ BoxTM.

To create a "New User" or manage created users:

  1. Click "Adopted EZ Boxes" menu.
  2. Click Users button.
<iocon></iocon> Users creation button
  1. Click +New User button to create a user.
<iocon></iocon> Users New user

User creation form

  1. Type a valid email address for the Username.

  2. Type an Alias to identify the user.

  3. Check Hidden if you don't want to send the certificate to the user. In this case the certificate can be downloaded by you only and no confirmation email will be sent.

    If unchecked (default condition) an email is sent to the user. If the certificate is protected by a password, a direct download link will be included in the email as well.

    Do not check Hidden if you want to use EZ ConnectTM Client. EZ ConnectTM can't work if Hidden is enabled.

  4. Check Set password to enable additional password protection upon connection to the EZ BoxTM device.

<iocon></iocon> Users New user password
Please note, the connection is protected by a digital certificate. The password will add an additional protection to the certificate.
5. Check Set time range to set a validity of the certificate beyond which it will expire.
<iocon></iocon> Users New user time
6. Grant access to networks section allows you to grant or deny access to a specific network where EZ BoxTM is connected. EZ BoxTM only detects the network to which it is connected, but if for example, the EZ BoxTM is connected to a company with multiple networks, you can manually add the networks so that they can be accessed and visible from EZ BoxTM . 7. Click Create certificate button to create the user and generate the certificate.
<iocon></iocon> Users New user form

Once the user has been created:

  1. Click Back to users button to go back to the previous page and manage or create another user.
  2. Click Download client button to go to the VPN Client page.
<iocon></iocon> Users New user created

Manage users

In the users management page, you can see the list of all the users you have created.

<iocon></iocon> Users management buttons

From this section, you can manage the users using the following buttons:

<iocon></iocon> Users buttons
  • Download: Click to download the EZ VPNTM OpenVPN digital certificate to be used with any OpenVPN Clients.
  • Remove: Click to delete the user.
Please note that the deleted users cannot be restored.
  • Alias: Click to change the alias of the user.
  • Disable: Click to disable the user to connect to the VPN.
Please note that if the user is currently connected, you will be immediately disconnected.
  • Set pwd: you can set a password for the certificate to add an additional layer of security.
  • Set timer: set a validity of the certificate beyond which it will expire.
  • Networks: see the networks that are enabled and change access rights. Please check Additional Remote Network section for further details.

  • Send mail: send an email with a link to download the certificate.

    The user will receive an email with an invitation to download the certificate and import it in any compatible OpenVPN client. EZ VPNTM recommends downloading the free software EZ ConnectTM from the “Need a VPN client?” section.

New user (Groups Mode)

When Groups mode has been activated, users can be created from:

  • My Users menu.

    1. Click My Users menu.
    2. Click Users.
    3. Click Add user button.
    <iocon></iocon> Groups create user
  • Adopted EZ Boxes menu.

    1. Click "Adopted EZ Boxes" menu.
    2. Click Users button.
    <iocon></iocon> Groups user creation button
    1. Click Add user button.
    <iocon></iocon> Users creation button 2

User creation form (Groups Mode)

  1. Type a valid email address for the Username.

  2. Type an Alias to identify the user.

  3. Check Hidden if you don't want to send the certificate to the user. In this case the certificate can be downloaded by you only and no confirmation email will be sent.

    If unchecked (default condition) an email is sent to the user. If the certificate is protected by a password, a direct download link will be included in the email as well.

    Do not check Hidden if you want to use EZ ConnectTM Client. EZ ConnectTM cannot work if the Hidden option is enabled.

  4. Check Set password to enable additional password protection upon connection to EZ BoxTM device.

<iocon></iocon> Users New user password
Please note the connection is protected by a digital certificate. The password will add an additional protection to the certificate.
5. Into the Select groups section, select the groups to assign to the user. Use CTRL key for multiple selection. 6. Click Create user button to configure the user and generate the certificate.
<iocon></iocon> Groups user creation form

Manage users (Group mode)

To manage the users:

  1. Click My Users menu.
  2. Click Users.
  3. Click Manage user button of the user to manage.
<iocon></iocon> Groups user management button
  1. In the Select groups section, select the groups to add to the user.
  2. Click Update groups button to save the groups configuration.
  3. Type the Alias of the user.
  4. Click Update alias button to save the alias configuration.
  5. Type the Password to configure an additional security layer.
  6. Re-type the password to confirm it is correct.
  7. Click Set password button to set and save the password.
  8. Click Delete user to delete the user.

Deleted users can't be restored. Deleted users will no longer be able to access EZ BoxTM devices.

<iocon></iocon> Groups user management form

On-device user configuration

  1. Click "Adopted EZ Boxes" menu.
  2. Click Users button of the EZ BoxTM to which to assign a group.
<iocon></iocon> Groups user creation button
  1. Download: Click to download the EZ VPNTM OpenVPN digital certificate of the user to use with any OpenVPN Clients.
  2. Disable: Click to disable the user from connecting to the EZ BoxTM
    Please note that if the user is currently connected, he or she will be immediately disconnected. This will disable the user from connecting to this EZ BoxTM only.
  3. Set timer: set a validity of the certificate beyond which it will expire. The user's access to this EZ BoxTM is allowed within the specified time.
  4. Networks: see the networks that are enabled and change access rights. Please check Additional Remote Network section for further details.
  5. Send mail: send an email with a link to download the certificate.

The user will receive an email with an invitation to download the certificate and import it in any compatible OpenVPN client. EZ VPNTM recommends downloading the free EZ ConnectTM client from the “Need a VPN client?” section. This function is not available if the user has been created as hidden.

Groups

When the Group Mode is enabled for the first time a default group with the same alias of the EZ BoxTM is created for each EZ BoxTM and current configured users will be assigned newly created group.

<iocon></iocon> Groups assigned group

Add Groups

To add a group:

  1. Click My Users menu.
  2. Click Groups.
  3. Click Add group button.
<iocon></iocon> Groups add group
  1. Type a Group name
  2. Click Create group button to save the configuration and create the group.
<iocon></iocon> Groups type group

Manage Groups

To manage the groups, proceed as follow:

  1. Click My Users menu.
  2. Click Groups.
  3. Click Manage group button you would like to manage.
<iocon></iocon> Groups manage group

Assign users to a group

  1. Type the name of the group into the Group name field.
  2. Click Update name button to save the name of the group.
  3. Click Delete group button to remove the group.
  4. Click X red button to remove a member from the group.
  5. Click + green button to add a member to the group.
<iocon></iocon> Groups manage group detail

Assign Groups to an EZ Box

  1. Click "Adopted EZ Boxes" menu.
  2. Click Users button of the EZ BoxTM to which to assign a group.
<iocon></iocon> Groups user creation button
  1. Click to select the group you would like to assign to the EZ BoxTM.
  2. Click Assign Group button to assign the group.
<iocon></iocon> Groups assign group

Unassign Groups to an EZ Box

  1. Click the X button to remove the group from the EZ BoxTM.
<iocon></iocon> Groups unassign group