Account management#
Introduction#
LiveShield Manager supports multiple user accounts with different roles. You can limit what each user sees and can change by assigning a global role and, for non-administrators, specific prefix access.
Account management lives under Preferences in the sidebar footer. The page has two tabs:
Account settings: available to every logged-in user. Use it to change your own password.
Users: visible only to Administrators. Use it to create users, set roles, assign prefixes, and reset passwords.
The initial admin account is created during installation. See Base configuration for the first login, and installation, manager password for how the admin password is generated.
Note
There is no invitation or email flow for new users. There is also no delete-user action. To revoke access, set the user’s Global Role to NoAccess and clear their assigned prefixes.
Roles#
Each user has one Global Role. Roles are listed from most privileged to least:
Administrator: Full Manager access. Sees all prefixes and attacks. Can manage Users, Settings, Devices, Upstreams, and Notifications. Can create, edit, and delete Filtering Rules.
Operator: Can view attacks and Reporting. Can view and edit Filtering Rules for assigned prefixes only. Cannot create or delete Filtering Rules. No access to Settings, Devices, Upstreams, or Users.
Viewer: Can view attacks and Reporting. Can view Filtering Rules for assigned prefixes only (read-only). Cannot edit, create, or delete rules.
NoAccess: Can log in and open Preferences to change password. No other functional permissions. New users are created with this role.
Important
For Operator and Viewer, access is further limited by assigned prefixes under Specific access. If no prefixes are assigned, Attacks and Filtering lists appear empty even though the global role allows those features. Administrator ignores prefix grants and always sees everything.
Prefixes themselves (protected CIDRs / Filtering Rules) are configured under Filtering. See Detection and filtering.
Account settings#
Navigate to Preferences in the sidebar. The Account settings tab opens by default.
Click Change password. A dialog will appear where you can set a new password.
Settings explained:
Current password: Your existing password.
New password: Must be at least 8 characters and include at least one uppercase letter, one number, and one symbol. A strength meter is shown while you type.
Repeat new password: Must match New password.
Click Confirm to apply the change.
Hint
If you lost the admin password, you can reset it from the Manager installation wizard option [5] Reset admin password. See Installation.
Users#
Only Administrators can open the Users tab. Navigate to Preferences, then select Users.
The list shows Name, Global Role, and Actions for each user.
Adding a user#
Click the “+” button next to the Users title. A dialog will appear where you can create a new user.
Settings explained:
Username: Login name for the new account.
Click Create. The dialog closes and a popup shows the generated password once.
Warning
Copy the generated password immediately. It will not be shown again. If you lose it, use Reset password on the Users list.
The new user appears in the list with role NoAccess. Set a proper Global Role and assign prefixes after creation (see below).
Changing Global Role#
On the Users list, use the Global Role dropdown for the user. Options are Administrator, Operator, Viewer, and NoAccess. The change is saved immediately.
Warning
You cannot change the role of the last remaining Administrator. The dropdown is disabled with the message that only one administrator is left.
Assigning prefixes#
Prefix assignment controls which Filtering Rules and attacks a non-administrator can see (and, for Operators, edit).
Click the edit (pen) action for the user. A dialog Edit user will appear.
Settings explained:
Username: You can rename the account if needed.
Specific access / Prefixes: Multi-select of Filtering Rules. Options are shown as
{cidr} - {name}(for example192.0.2.0/24 - Customer A). Use Select prefixes to choose one or more.
Click Save when done.
Note
Prefix access applies to Operator and Viewer. Administrators always have access to all prefixes; assigning Specific access to an Administrator has no effect on what they can see.
To create the prefixes you want to assign, go to Filtering > Rules. See Detection and filtering.
Resetting a user password#
On the Users list, click the reset password (asterisk) action. Confirm the reset in the popup, then a new password is shown once.
Warning
Password reset cannot be undone. Copy the new password immediately; it will not be shown again.