====== Permanent Users ======
===== Creating a New Permanent User =====


Permanent Users are created for regular users of your WiFi Realm. As an example we want to add Jenny the Cashier as a Permanent User at Bean There Coffee Shop. We want to allow her 1GB usage per month. Follow these steps.

  * On the Home Screen of RADIUSdesk click on the Permanent Users Icon.
 {{:user_guide:permanent_users_icon.png?200|}}

The Permanent Users Window opens with a list of existing permanent users.
  * Click the **Add Button** on the  Action toolbar in the Permanent User Window.
 {{:user_guide:action_toolbar.png?200|}}

  * A New Permanent User panel appears
{{:user_guide:new_perm_user_window.png?300|}}
  * Select **Logged In user** to pick yourself as the owner who will manage this Permanent User. 

  * Click** Next** to carry on to user detail.

  * Fill in the **Username** and **Password** of the Permanent User you are creating.

  * Select **Bean There** as the** Realm** in which Jenny will have WiFi access from the Realm drop-down.

  * Select **Data Standard 1G** from the **Profiles** drop-down list to give Jenny 1G of data to use per month.
{{:user_guide:jennycreate.png?|300}}

===== Creating Multiple Permanent Users =====

If you want to create **more than one** Permanent User for the **same Realm** with the** same Profile** of 1Gb Limit per month, then follow the same steps as  above to create a Permanent User. 

  * While the New Permanent User Panel is open, tick off the **Create multiple Users** tick box. 

  * After filling in the first username and password click the **Next** button. 

  * The First user is then added to the **Permanent Users window** while the New Permanent User panel remains open. A Green pop-up appears to confirm the creation of the Permanent User

  * Fill in a second and third Username and password and click** Next** until all desired users are created. 

  * Close the New Permanent User panel when you have created all you wanted to.
{{:user_guide:create_multiple_users.png?600|}}

===== Setting Activation and Expiry dates for a New Permanent User =====

Another two tabs available inside the New Permanent User Panel is Personal Info and Activate and Expire. By Default when creating a New Permanent User** Activated** and** Always Active** is selected. 

  * To **Deactivate** the user at first, to activate later, click the** Activate check-box** to **remove** the mark.

If you want your user to only have Access for a certain period, say three months

  * Leave the Activate check-box **checked**.

  * **Uncheck** the Always Active check-box. This will open date fields.

  * Select a date to **Activate** (From) and a date to** Expire**  (To)

  * Click **Next** to finish.

{{:user_guide:activate_expire.png?800}}
===== Enable or Disable an existing Permanent User =====

Once a Permanent User is created you can always Activate or Deactivate a user by selecting their username in the Permanent User Window and clicking on the** Enable/Disable button** on the **Extra Actions Toolbar** in the Permanent Users Window.

{{:user_guide:extra_actions.png?200|}}

===== Changing an existing Permanent User's Activation and Expiry Dates =====

If you have already created a user but now want to change the Activation and Expire dates of the user, follow these steps:

  * Click the **Permanent User Icon** on the Home page. The Permanent User Window opens with a list of existing Permanent Users.
 {{:user_guide:permanent_users_icon.png?200|}}

  * Click on the **user** you want to change and click the** Edit button** on the Action Toolbar in the Permanent User Window.{{:user_guide:action_toolbar.png?200|}}

  * Click on the **Always Active check-box** to deselect it. The date fields appear below the check-box. 

  * Select a date to Activate (From) and a date to Expire (To):

  * Click **Save**.

{{:user_guide:edit_perm_users.png?800|}}

Note: The Activate and Deactivate Options are also available when changing the user's password with the **Password Manager Applet**.

===== The Password Manager Applet =====

The Password Manager can be found on the home page of RADIUSdesk because it is used often.

  * Click on the Password Manager Icon on the RADIUSdesk home page. The Password Manager window appears.
{{:user_guide:password_man_button.png?200|}}
  * From the Username drop-down **select** the user who's password needs to be changed. Their** current password** appears in the next field.

  * Fill in a **new password** in the relevant field.

  *  If you want to change the same user's Activation dates, Click on the **Always Active check-box** to deselect it. The date fields appear below the check-box. 

  * Select a date to Activate (From) and a date to Expire (To):

  * Click **Save**.
{{:user_guide:password_manager_window.png?400|}}

===== Changing a User's Time-Data-Bandwidth Profile =====

The Profile you assign to a user determines how the user is limited in the matter of Time, Data or Bandwidth Usage of the WiFi. To change the Profile of a user take the following steps:

 * On the Home Screen of RADIUSdesk click on the Permanent Users Icon.

 {{:user_guide:permanent_users_icon.png?200|}}

The Permanent Users Window opens with a list of existing permanent users.
  * Click on the user who's Profile you want to change.

  * Click the **Edit Button** on the toolbar in the Permanent User Window.
 {{:user_guide:action_toolbar.png?200|}}

  * A Panel with the user's detail appears
{{:user_guide:changeprofile.png?800|}}

  * **Select** the desired Profile from the Profile drop-down List

  * Click **Save** and close.
<WRAP center round info 90%>

Note: A Profile is built by adding Profile components. These Profile components are Time limits, Data limits or Bandwidth limits. RADIUSdesk installs with 13 Profile Components that you can mix and match to build the right Limits Profile for your users. If you cannot find the Profile type you desire then create one by following these instructions: [[http://radiusdesk.com/docuwiki/technical_discussions/practical_new_access_provider#add_a_profile_and_profile_components|Profile and Profile Components]]

{{:user_guide:13components.png?800|}}
</WRAP>

===== Restricting a Permanent User to a certain Device =====

To give a person access to the WiFi with only his laptop or only his phone you first need to create a Permanent User account for that person and then add the device's MAC address to the user's account with the BYOD Manager.

==== The Bring-Your-Own-Device Manager (BYOD Manager) ====

Once the Permanent user is created we can continue with the following steps:

  * Click on **MENU**=> **Permanent Users**=> **BYOD Manager**. The BYOD Manager window opens with a list of devices.

{{:user_guide:boyd_window.png?800|}}

  * Click the** ADD button** on the Action Toolbar in the BYOD Manager window. A New Device panel opens.

{{:user_guide:byodaddpanel.png?400|}}

  * Type in the **Mac address** of the device you are adding in the first field.

  * Type in a** description** of the device (e.g. Jenny's laptop) in the next field.

  * Select The **Owner** from the drop-down list.

  * Select a **Profile** from the drop-down list that you want to apply to this device.

  * Click** Next** to close the panel.

<WRAP center round tip 60%>

With BYOD devices the strictest profile applies. Say for example Jenny is allowed 1GB data as a user but I applied a 250MB profile to her laptop. Then Jenny will only be allowed 250Mb on her laptop and the rest of her data she may use from her phone or pc.
</WRAP>

Now that you have created a Permanent User and added a Device owned by this user you can also do the following:

 * Click the **Permanent User Icon** on the Home page. The Permanent User Window opens with a list of existing Permanent Users.
 {{:user_guide:permanent_users_icon.png?200|}}

  * Click on the **user** you want to change and click the** Edit button** on the Action Toolbar in the Permanent User Window.{{:user_guide:action_toolbar.png?200|}}

  * Click on the Devices tab in the **user's** window.

  * Click the **Connect only from listed devices** tick-box to limit the user to the device you added.

{{:user_guide:deviceonly2.png?800|}}

==== Automatic Device Sign-in ====

You can also tick the ** Auto-Add device after Authentication** tick-box. This will cause the User to only **sign in once** and from there the WiFi system will allow the device to log-in without having to give a username and password again. Unfortunately, this feature only works with **routers that has Mac Authentication** built in.

Try it:

* Click the **Permanent User Icon** on the Home page. The Permanent User Window opens with a list of existing Permanent Users.
 {{:user_guide:permanent_users_icon.png?200|}}

  * Click on the **user** you want to change and click the** Edit button** on the Action Toolbar in the Permanent User Window.{{:user_guide:action_toolbar.png?200|}}

  * Click on the Devices tab in the user's window.

  * Click the **Auto-Add device after Authentication** tick box to allow automatic sign in to that user's devices after they have logged in once.

{{:user_guide:deviceonly.png?800|}}

===== Some Advanced Features ===== 
  * Under the **Basic Info** sub-tab when you edit a permanent user is a couple of fields which require more discussion.
  * **Static IP** This field can take an IPv4 IP Address. This will automatically translate to the **Framed-User** and **Framed-IP-Address** Private RADIUS Reply attributes added for the specific user. (Add an IP-Address, Save it, and confirm that it is added under **Private attributes** tab.)
       * For this to have any affect, the NAS which is serving the user must be able to interpret those reply attributes
  * **Extra Filed Name** This is just an extra field which you can use to store values for your own use and has Nothing to do with RADIUS
  * **Extra Filed Value** This is just an extra field which you can use to store values for your own use and has nothing to to with RADIUS.
        * We make use of these two fields to map a social logged in user to the 'real' user in RADIUSdesk.
        * So when you implement Social Login these fields will be used by the system.

  * **Connect only from selected SSIDs** is deprecated and will be removed in the future