<< Click to Display Table of Contents >> Navigation: Robo-FTP User's Guide > Robo-FTP Interface > The Configurator > Scheduler menu > Configuring the Scheduler > Creating and Assigning Job Groups |
It is possible to run individual jobs as different users by creating job groups. This can be helpful when, for example, you are accessing a network drive that can only be accessed by a particular account, so you will want to ensure that the Robo-FTP scripts or jobs dealing with that network drive are run under that specific account. This enables you to make use of the principle of least privilege and ensure that for each group of jobs running under a particular account, they are not granted access beyond what is needed.
A job group has a specific user assigned to it. Every job that is assigned to that group will be run as the user of the group.
The "Group Settings" tab
To create a new job group, from the Scheduler menu, open the "Group Settings" tab. Under the "Group Settings" tab, click on the "Click to Add Job Group" button, and enter the group name in the dialog when prompted. Select the assigned user for that group, type in the corresponding password for that user, and click the "Apply" button to finish creating the group.
The New Group dialog
In order to assign a job group to a new or pre-existing job, navigate to the "Job List" tab. Click the "Add" or "Edit" button as appropriate. To the right of the "Job Group" label, there will be a drop-down list specifying all known groups. Select the preferred group and click "OK" to confirm your choice. All subsequent runs of the job will be run under the account of its assigned job group.
Assigning a job group to an individual job
If you are using the Robo-FTP FrameWork and you configure a job group used for framework jobs to run as an alternate user that user must have access to the Scheduler Service database so the job can record its activity successfully. This is only possible if both users have administrative privileges or you are using Microsoft SQL Server.