WebMO Help - Group Manager (Enterprise)

Groups

WebMO groups are collections of users. Groups are created and defined by the WebMO admin user. Groups are typically similar users, e.g., students in a course. Each group has a group administrator, who has access to its users and their jobs, e.g., the course instructor.

Users and jobs can be filtered by groups, allowing for actions to be carried out on collection of similar items with a single command, e.g., all group member can be deleted in a single command.

Permissions can be set differently for groups, e.g., novice users can be limited to selected computational engines with short job time limits while advanced users can access more engines with longer time limits.

Groups allows the admin user to focus efforts on WebMO as a whole, while delegating user creation and job monitoring to another party.

Creating a Group

The admin user can create a new group by clicking the New Group button in the Group Manager. A group name and group administration password is required on the Password tab. If using the built-in WebMO queue, the maximum number of simultaneous running jobs per user may be optionally specified on the Permissions tab. The job time limit, allowed engines, and allowed servers/queues for the group are also optionally specified on the Permissions tab. If external authentication is enabled, then there is a password tab on which the webmo administrator may permit externally authenticated users to create accounts for themselves in the group after optionally providing a group newuser password.

Note that the default group is "webmo", which is always present.


New Group Password Tab


New Group Permissions Tab
(built-in queue)

New Group Permissions Tab
(external queue)

Administering a Group

Creation of a group automatically creates a group administrator, which is a new user with the name of "admin-{group} and a password specified during the group creation process.

The group administrator is a "sub-administrator" with actions limited to the group users and their jobs. Briefly, group administrators have full access and control over group users and their jobs. However, they cannot see other groups, exceed any limits placed on the group by the admin user, or alter any WebMO configurations.

To administer a group, the group administrator should login to WebMO with username "admin-{group}", e.g., admin-organic, and the specified password. The group-administrator can:

Setting Group Defaults

There are two steps to setting group default settings. First, the admin user (admin)specified maximum limits for the group by editing the group-admin permissions with User Manager. Second, the group administrator (admin-group) or admin user (admin) can specify further limits within the maximum limits by editing the group permissions with Group Manager.

1. The admin user can specify Max running jobs, Job time limit, Enabled interfaces, and Enabled queues default permissions for all users in a group with the User Manager. Click the Edit icon () for the group administrator and then view the Permissions tab. Specify the time limits, available engines, and available queues or servers for all users within the group.


Admin-Group Permissions Tab

2. The group administrator or admin user can specify additional restrictions, within the limits previously imposed by the admin user with the Group Manager. Click the Edit icon () for the group. On the Permissions tab, specify any further restrictions on time limits, available engines, and available queues or servers.

Group members are constrained by default to use the group settings. It is possible to define user settings manually instead of using the group settings. With the User Manager click the Edit icon () for the user, view the Permissions tab, and uncheck Use group settings. However, the user will always be limited by the maximum limits set by the admin user for the entire group.


Group Permissions Tab

User Permissions Tab

If using the built-in webMO queue, Max running jobs refers to the maximum number of simultaneously running jobs allowed for the user. Additional jobs will be queued (to preserve availability of resources for other users). Enter a limit, or enter "N/A" or "-1" to specify no limit.

Job time limit refers to the maximum amount of time that a single job may run, after which the job is automatically killed by WebMO (to prevent runaway jobs). Enter a time in seconds, or enter "N/A" or "-1" to specify no limit. The admin-group user Permission tab is editable only by admin and not by admin-group, as it sets the maximum job time limit.

By default all configured engines and queues are available; however, a subset of those can be specified by alt/command-clicking. Click the Submit button to save these changes.

Moving Users to a Different Group

The admin user can move users from their current group into a different group with the User Manager by clicking the Change Group button.

Editing a Group Administrator

The admin user can change the password and edit the preferences (full name, email address, archive format, and view job in new window/tab) of a group administrator with the User Manager by clicking the Edit icon () and using the Password and Preferences tabs.