Searching...

Matching results

    Administration

    Administration activity helps you to view your account details, manage security options, administrators, users and user profiles, partnerships and connection to external accounts used for subscription management and SMS sending.

    Initializing Table Of Contents...


    Overview of Administration

    The activity is organized into sections designed to help you configure and manage your account:

    • Account details
    • Support
    • Users
    • Profiles
    • Partners
    • Security options
    • External accounts

    The Administration functionality is part of the My Account section, consolidating similar functionalities in one location. As such, it can be accessed from ALMS by clicking on the User Menu and selecting My Account:

    Account details

    The account details section displays the following items:

    • UID: Unique identifier for your AirVantage account. The Sierra Wireless Customer Support team will request this identifier to ensure we are accessing the correct account.
    • Name: The company name. This is a unique value and can be edited at any time.
    • Account Type: Displays the account type and defines the capabilities of your account.
    • Offer Type: Depending on the account type, this field may indicate the status of the account.
    • Picture: An optional picture that you can associate with the account. It is not displayed anywhere other than on this page.
    • Billing contact: If your account is configured to do direct billing with Sierra Wireless, this section contains the details of the billing contact person from your organization. This section may or may not be populated depending on the type and status of account. Please ensure this information is kept up to date.


    Support

    The Support section contains all of the information on how to get support for ALMS, including:

    • Documentation: A link to the on-line documentation.
    • Resource center: A link to the Source, an online source for technical documentation, firmware releases, and other product information.
    • Services status: A link into Status screen that provides real-time updates on AirVantage’s status. We strongly recommend that customers subscribe to notifications from this page.
    • Technical support: Details on how to contact the technical support team who will assist you.
    • Feedback: A link to our on-line tool for submitting product enhancement requests.


    Address Book

    The address book contains contacts in your account who you may ship your orders to.

    You can create as many contacts as required, and these users will be listed as options when you create a new order. These contacts do not have an AirVantage user account for access to your account – they are only used for orders delivery. If you need to create users for access to your AirVantage account, see the Users section below.


    Users

    The Users section displays the list of users in the account and the user profile associated with each user. It provides the following features:

    • Invite a user: The “+” button enables you to invite a user to the account (see How to add new user and manage user profile for more information). You enter the email address, set a profile, and provide a message to the user. The user will receive a message via email with a link to log in. The user will need to set a password for their new user account. The Invitation box is displayed when you have active invitations.
    • Edit the profile of a user: Select a user account and click the pencil icon.
    • Delete a user from the current company: Select a user account and click the X icon.

    Note: Only administrators or users with the associated permission can take these actions.

    Account administrators are managed in the Security section.


    Profiles

    Profiles define which system entities and features are accessible/available to a given user.

    Pre-defined profiles are available in the account and administrators can create additional profiles.

    Profiles are listed in the Administration > Profiles section and can be reviewed and edited from the Profile Details page.

    From the Profiles section you can:

    • Create a profile (only administrators can create profiles link)
    • View profile details
    • Edit a profile

    For additional information see Managing Profiles.


    Partners

    Partners are other companies that are connected to you in some way. When a partner is added to your network, you select a profile to restrict access to all their users when they access to your company. It is possible to define a profile with No rights to a partner.

    The Partners section displays your list of partners and provides the following features:

    • Edit partner: Change the profile you give to the users of your partners in your company.


    Security options

    The security options described hereafter are based on user or device connection restrictions. Those options are configurable per company. These restrictions help protect your data from unauthorized access and phishing attacks. The security section also covers the management of company administrators.

    To access the security section, from My Account click on Administration > Security:

    User IP filtering

    The User IP filtering option enables you to restrict a user’s login based on the IP addresses they are logging in from. You can configure this option with your organization’s trusted IP range.

    As input, you can provide:

    • A range of IP
    • And/or a list of IP addresses

    Once this option is activated, a user trying to log in from an IP address not in the authorized list will be denied access to AirVantage.

    Device IP filtering

    The Device IP filtering option enables you to filter devices access based on the IP addresses they communicate from. You can configure this option with your organization’s trusted IP range.

    As input, you can provide:

    • A range of IP
    • and/or a list of IP addresses

    If your devices are communicating through a VPN to ALMS, you should use the range “10.191.0.0” to “10.191.255.255” for NA and “10.193.0.0” to “10.193.255.255” for EU to ensure every device communication comes from within the VPN.

    If you are not using a VPN to AirVantage, you can still use this option. As the IP address allocated to devices depend on your operator, to help you with the configuration of the option, you can find the external IP address detected by ALMS for each system in the timeline of this specific system.

    Once this option is activated, a device trying to communicate from an IP address not in the authorized list will be denied access to AirVantage.

    Two-Factor Authentication

    The two-factor authentication (2FA) option enables two-stage verification to double check the identity of a user trying to login to ALMS. It combines the standard login based on a username and password (“something the user knows”) with an additional factor “something the user has”.

    When this option is activated, after entering credentials on the login page, the user will have to provide the six-character code (a one-time password) the user will receive in a SMS on their phone. The SMS is sent by ALMS to the phone number configured in the user’s detail form. This 2FA will be required at every log in for every user of the company.

    For the 2FA feature to operate correctly, all users in the company MUST have a phone number in their user profile. In addition, once 2FA is activated in the company, all new users will require a phone number.

    To enable two-factor authentication in your company, please contact your reseller or our support team.

    Single sign on (SSO Configuration)

    Single sign-on (SSO) refers to the ability for AirVantage users to log in with their enterprise credentials and access AirVantage as seamlessly as they do for most applications that they use in their day to day work. SSO solves key problems for the business by providing:

    • Greater security and compliance as users only need to remember their company credentials
    • Improved usability and employee satisfaction with seamless login
    • Reduced IT costs related to users provisioning and deprovisioning upon departure

    The SSO option requires your identity provider to support OpenID Connect (OIDC) as authentication protocol. To enable single sign on in your account, please contact your reseller or your Sierra sales representative.

    Once the SSO option is enabled for your account, you can refer to the How to configure SSO for my account? to finalize the setup.

    Company Administrators

    Company administrators are the only ones who can edit the security configuration, create new users, or create new profiles.

    An administrator can promote any user from the company, and also add users from partner companies to the role of company administrator: choose the partner and click in the Administrators field to select users from the partner.

    Other Native Security Features in AirVantage

    Account Timeouts on Incorrect User Authentication

    AirVantage requires the user to authenticate with the system to provide access. As part of the standard security options AirVantage prevents users from making multiple erroneous login attempts. The system requires a user to wait a random amount of time between two login attempts. This prevents automated systems from attempting to brute force user passwords.


    External Accounts

    The External Accounts section is where you can configure connectors to operator and SMS accounts.

    Operator Accounts

    Operator accounts are used for third-party subscription management. It holds the company configuration and credentials to access third-party subscription management platforms. Depending on the integration implemented with the given operator, you’ll be able to do the following actions on the declared third-party subscription:

    • Synchronize the status from the operator network.
    • Suspend or resume the subscription.
    • Activate or terminate a subscription.

    An operator account can be associated with SMS accounts that can be used when AirVantage sends an SMS to a subscription of this account.

    When using Sierra SIMs, the operator accounts are automatically added and configured in this section.

    The Operator Accounts section provides the following features:

    • Create and configure a connector to access an operator account
    • View account details
    • Edit account

    More information on Subscription Management

    SMS Accounts

    The SMS Accounts section provides the following features:

    • Create and configure a connector to access an SMS gateway account
    • View account details
    • Edit an account

    More information see: How to configure an SMS account


    How-Tos

    This section provides you with helpful procedures for common tasks.

    TOP