workspace administration (high) COPY Flashcards

Security and Permissions

1
Q

how can you use the instance setting Relativity.Authentication WindowsAuthIpRange to define an IP address for users to log in?

A

this setting is used to define the valid range for the Relativity instance; the default defines all IP addresses as valid

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

how do trusted IP ranges work to define IP addresses for users to log in?

A

specifies a valid IP address or addresses for each user, which could be an individual address, a range of addresses, or combination of either

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what are 2 ways that an IP address range could be set for Relativity users?

A

WindowsAuthIpRange and Trusted IP range

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

can WindowsAuthIpRange and Trusted IP range be used to stop users from logging in if they access Relativity from the same server where it is installed?

A

No, you must disable non-admin user remote access to the server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what instance settings can you use to define integrated authentication behavior? (2)

A

UseWindowsAuthentication and WindowsAuthIpRange instance settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

If UseWindowsAuthentication is False, then:

A

integrated authentication can’t be used. Relativity ignores the WindowsAuthIpRange value.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

if UseWindowsAuthentication is True and WindowsAuthIpRange isn’t set:

A

then integrated authentication will always be used regardless of IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

If UseWindowsAuthentication is True and WindowsAuthIpRange is an IP address or address range:

A

then Integrated Authentication is used when the computer’s IP address falls within the WindowsAuthIpRange value.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what kind of server do you need to send email authentification?

A

SMTP server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what instance settings are needed to define the emails addresses and body text for authentification? (3)

A
  • AuthenticationEmailFrom - sets the email address that appears in the From field of email messages that contain authentication information for users.
  • EmailFrom - sets the email address populated in the “From” field when sending email notifications.
  • ForgotPasswordRequestEmailFrom - sets the value in the From field for the forgotten password request email message.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is relativity not certified to work with any version of?

A

RSA Authentication Agent for Web for Internet Information Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

how many agents must you add for each web server in your relativity environment?

A

one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what must you do before you configure RSA authentication in Relativity?

A

you must copy the RSA configuration files to your Relativity web server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

a user can have multiple login methods, but only one from what categories?

A

only one from among password, RSA, and active directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

the invitation workflow works applies to which methods? (3)

A

password only,
password 2-factor, and
password outside trusted IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

how long is the invitation email for the password only option valid for?

A

one week

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

what instance setting can be used to increase the default invitation link expiration period?

A

InvitationLinkLifetimeInMin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

how does the password 2-factor option work?

A

requires a passcode in addition to a password; The system emails a passcode to the user during logon, and it’s different each time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

how long is the link in the email for the password 2-factor option valid for?

A

5 minutes, and only the most recently-sent email can be used. The link expiration time is not configurable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

how does the password outside trusted IP option work?

A

requires a passcode only if the user logs in outside of a specified IP range. If the log on is inside the trusted range, then only a password is required.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

how are passwords reset in Relativity?

A

by sending the user an email with a reset link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

how long is the link within the email for password reset valid for?

A

15 min, and only the most recently sent email can be used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

what instance setting can you use to increase the default reset link expiration period?

A

PasswordResetEmailExpirationInMinutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

can system admins set or see passwords?

A

no, by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
in order to manually set a password, what instance setting must be configured?
AdminsCanSetPasswords instance setting, set to true
26
how does the active directory method work?
uses Windows Active Directory to authenticate the user
27
how does integrated authentication work?
uses Windows supported authentication protocols, such as Kerberos, to automatically log in users
28
what 2 instance settings must be configured in order to use integrated authentification?
- UseWindowsAuthentication - must be set to True to use Integrated Authentication - WindowsAuthIpRange - set this to the IP address or addresses for a trusted range of computers
29
how does client certificate authentication work?
uses a smart card assigned to a user
30
how does RSA authentication work?
requires a user to have an RSA SecurID token that is registered with your RSA Authentication provider
31
why does implementing client domains require an additional license from Relativity?
Each client domain license is unique, and client domains can have different terms encoded on their license keys. The license for a client domain is unrelated to any other license for Relativity (e.g., number of seats).
32
what cannot be activated for Client objects that have existing workspaces associated with them?
Client domains functionality
33
what is the purpose of the client domain feature?
an easier way to securely isolate users, workspaces, groups, resource pools, and matters by client
34
what is the root object of a client domain?
the client object in the administrative workspace
35
if you enable client domains a client, you can no longer do the following:
- cannot disable it on that client later, - cannot edit the name of the client - cannot delete the client
36
what can a user group that is not part of the system admin group (named: client domain admins) do?
perform common administrative tasks within their own client domain with limited visability into the Relativity environment as a whole
37
what does enabling client domains on a client involve?
generating a client domain request and then applying an activation key
38
by enabling a client domain, you ensure that:
any content or other Relativity components associated with this client are visible only to a select group of users
39
what must you do before client domains can be enabled on a client?
you must create all the objects you want to include within the client domain child objects of the client
40
what instance setting must you configure to view and edit client domain settings?
ClientDomainFeatureAvailable to true
41
what group should not be assigned as the workspace administrator group for a given workspace that is part of a Client Domain?
the everyone - (client's name) group that is created after client domains are enabled
42
what is created automatically after client domains are enabled?
- a new Everyone - [Client's Name] group - a unique copy of all resource pools associated with any workspaces under the client domain - a client domain admin group that permits its members to perform admin operations within the client domain - The Billing statistics - case rollup and Billing statistics - users reports include columns called Client Domain Name and Client Domain Artifact ID
43
what overrides client domain isolation after enabling of client domain?
permissions assigned to groups
44
enabling client domains does NOT change:
previously configured item level security settings applied to any objects within the client domain.
45
what happens if you try to use an activation key for client domains on a different client?
error message; you must select the client that you originally used to generate the request key
46
what are client domain admins?
essentially workspace admins for workspaces within the client domain; any limitations are based on the permissions you set for the user group in Relativity that the client domain admin belongs to
47
can client domain admins perform tasks that are exclusive to Relativity System Administrators?
No
48
what will happen if you use the Relativity User Import Application to import a Client Domain Admin?
the application adds that new user to the Everyone group by default, which will then break the Client Domain security in your Relativity instance
49
if you grant workspace admins within the client domain permission to edit security settings for groups within the client domain, then:
they can't edit permissions on groups outside of the client domain
50
how do you make a client domain admin?
a system admin must add them to the client domain admin group
51
what happens If you assign admin permissions to a user group by copying permissions from system admins?
you must unset and reset the View Workspace permission to allow the user group to edit the workspace
52
what 5 categories are relativity workspace permissions divided into?
``` object security tab visibility browsers mass operations admin operations ```
53
what does the object security tab list?
all workspace objects with their related item-level permissions
54
some object permissions require what other permissions?
corresponding tab visibility or browser permission
55
what overrides object-level security permissions?
item-level security
56
what permission only appears if Audit is installed and configured?
export (mass operations)
57
If a user has view access or greater to the History tab, but doesn't have permission to View All Audits, then:
the user can't view the history tab
58
where can you edit workspace permissions?
using the Workspace Security dialog accessible from the Workspace Details tab
59
what must you have in order to add and remove groups?
you must have the Edit Security permission set for the Workspace object and the Add and Delete permissions set for the Groups object (instance level security)
60
if you are in a workspace admin group, what do you need in order to add a group to a workspace?
you must have the instance-level Edit permission to the Group object
61
what can you do with instance security?
you can apply permissions to system admin groups to limit or grant access to particular system admin objects
62
what do you need to be if you want to edit client and matter for a workspace?
a system admin
63
If you grant tab visibility on a tab to a group that doesn't have view permissions on that object, then:
users within that group are unable to view the tab
64
Users will have access to the Workspaces tab even without the:
View Admin Repository permission
65
where can you find the group permissions report?
in the instance details tab, clicking group permissions report
66
what are the un-editable admin permission settings for the everyone group? (8)
- View User - visibility of user. - View View - visibility of views. - View Choice - visibility of choice. - View Group - visibility of groups. - View, Edit,and Add Error - visibility, edit rights, and add rights to errors. - View Relativity Script - visibility of Relativity script. - View Server - visibility of servers. - View Tab Type - visibility of tab type
67
system admins are the only users who can access: (6)
- library applications views - library application detail - relativity scrippt library view - new script page - edit script page - run script page
68
who is the only user able to grant other users membership into the system admins group?
a system admin
69
should you use tab visibility as a sole method of preventing security permissions?
no
70
what does the preview security feature allow a system admin to do?
interact with Relativity as if they are logged in as a specific user or a member of a specific group, allowing them to easily verify that the correct permissions are applied without logging in to Relativity under a different account
71
If you perform a job while previewing a user's security settings, then:
the audited action is credited to your username and not to the user whose security you were previewing when you started the job
72
does the preview security feature allow the system admin to monitor the actions of a user in real time?
No, it only stimulates what the user would see
73
what happens if you wanted to preview security on a member of the system admins group?
the preview security button is unavailable, and the favorites menu is disabled during preview security sessions
74
when might you involve a wait time when altering security permissions from overwrite inherited security to inherit security and vice versa?
if it is affecting 50,000 records or more