- 3 minutes to read

Install and Update Tool Access Rights

Important

This page applies to the deprecated Nodinite Install and Update Tool for version 6.x. Nodinite version 7.x and later is installed and updated with PowerShell scripts from the Nodinite Portal.

The Nodinite Install and Update Tool installs and updates every Nodinite Core Services instance on the server, so whoever can open it can change your whole environment. Until you restrict it, anyone on the network with access to the host can use it. This page shows how to limit the tool to named Active Directory users and groups.

Assign Access rights

The initial installer can configure, thus limiting the set of users (or Windows AD Groups) with a grant to access and use the Nodinite Install and Update Tool.

The users and groups differ in the Nodinite Install and Update Tool, and the Nodinite Core Service instances.

The Nodinite Install and Update Tool complains with a yellow warning bar that you still need to apply the access restrictions, encouraging you to perform the configuration. But beware, access to the tool is otherwise fully open and accessible for everyone on the network with access to the host.

How do I restrict access?

Make sure to comply to your security policies and limit access to this tool. [!IMPORTANT] Add yourself to the list of allowed Users, before adding other people.

You can Add and Remove users and groups from the Settings tab/page. You must know the exact name from the Active Directory. Use the following format (you can see the current account name at the top right):

  1. Domain\User Name
  2. Domain\Group Name
    Settings tab of the Install and Update Tool with the allowed users and groups
    Settings tab, where an authenticated and assigned user can add and remove users and groups to allow/prevent access to this tool.

Important

The changes are immediately effective when you click on the Add/Remove buttons.

The settings are instantly applied; if you do not add your own account first, you will be locked out of the tool.

Remove User

You can remove a user by clicking on the Remove button.
Remove User
Remove a user from the allowed list.

Remove Active Directory Group

You can remove an Active Directory Group by clicking on the Remove button.
Remove Active Directory Group
Remove an Active Directory group from the allowed list.

Configuration file

You should only edit this file if you lock yourself out of the tool or try to perform an advanced update/reconfiguration. Make sure to first create a backup of this file.

Users and groups may be edited in the underlying Settings.json file.

Tip

You need to be an administrator with access to the file system to read and change the content of this file. Remember to open an elevated Notepad, or even better, use Notepad++

appsettings.json (partial)
Example: Partial view of appsettings.json for user/group configuration.

ActiveDirectoryUsers": [
  {
    "Name": "DOMAIN\\JohnDoe"
  },
  {
    "Name": "DOMAIN\\JaneDoe"
  }
],
"ActiveDirectoryGroups": [
  {
    "Name": "DOMAIN\\administrators"
  }
]

Next Steps