NETWORK. ASSIGN AND CONFIGURE USER PERMISSIONS.

🎯 PURPOSE OF THE PRACTICAL LESSON

Learn:

• 👤 Create and configure user accounts on the network
• 🔐 Distribute and manage access to network folders and files
• 💻 Use the command line and graphical interface to assign user rights

🔷 THEORY: WHAT IS A USER ACCOUNT?

📘 Definition: �A user account is a unique identifier that allows a user to log in to a system and access its resources in accordance with the assigned rights.

👤 Examples of accounts: �root , user1 , admin , guest

📊 Account types:

• Local - created and managed on a specific computer
• Domain - centrally managed on a server (for example, in Active Directory)

🔷 NETWORK RESOURCES AND ACCESS RIGHTS

📁 Network resource types:

• Files and folders
• Network printers
• Services and processes
• Shared disks and databases

🔐 Access rights levels:

• Reading - viewing the contents
• Write - change or delete
• Execute - running programs or scripts

📜 ACL — Access Control List:

• A set of rules that determine who can perform what actions on a resource
• Applies to each object (file, folder, etc.)
• Can include both users and groups

✅ Linux ACL example: getfacl command

getfacl myfile.txt

Conclusion:

# file: myfile.txt

# owner: user1

# group: user1

user:: rw -

user:admin:r --

group::r--

mask::r--

other::---

➡️ Explanation:

• user :: rw - — the owner has read and write permissions
• user:admin:r -- — user admin has read-only access
• group ::r-- — group can read
• other ::--- — others do not have access

🔷 BASIC LINUX COMMANDS FOR USER MANAGEMENTBASHCOPYEDIT

adduser student

student passwd

usermod - aG sudo student

📌 Explanation:

adduser student — creates a new user named student

passwd student — sets or changes the password for a user

usermod - aG sudo student — adds the user student to the sudo group ( gives administrator rights)

🔷 SETTING UP ACCESS RIGHTS IN LINUX

chmod 755 file.txt

chown student:student file.txt

📘 Explanation of commands:

• chmod 755 file.txt — sets access permissions:
• 7 ( rwx ) - owner can read, write, execute
• 5 (rx) - group can read and execute
• 5 (rx) - others can read and execute
• chown student:student file.txt — assigns the user student as the file owner and the group student as the owning group
• 🔑 What do the numbers in chmod mean ?
• Each number is the sum of rights:

Example: 7 = 4+2+1 = rwx , 5 = 4+0+1 = rx

👥 Owner and group:

• The owner is the user who created the file. They have the highest rights.
• Group - Users who are members of the same group as the file have the specified group permissions.

🔷 USER GROUPS IN LINUX

📘 What is a group? �A user group is a way to group multiple accounts together to assign shared access rights to files, folders, and system resources.

🔧 Creating and setting up a group:

groupadd devteam # Create a devteam group

usermod - aG devteam student # Adding the user student to the devteam group

📊 Checking group membership:

student groups

Example output:

student : student devteam

➡️ This means that the user student is now part of the devteam group .

🔷 ACCESS LEVELS IN WINDOWS

🧭 Where to configure:

• Control Panel → User Accounts → Manage another account �Add, remove, and change account types (Standard / Administrator)

🔐 Local Security Policy:

• Open: secpol.msc
• Path: �Local Policies → Assign User Rights
• Setting:
• Right to log in
• Network login ban
• Access to a computer from the network, etc.

​

🔷 PRACTICE TASK 1 (LINUX)

🎯 Goal: Create two users, one group and give limited access to the / srv / data folder .

🧑‍💻 Task conditions:

Users: alice , bob

Group: staff

Folder: / srv / data

Permissions: Only members of the staff group can read and write; others have no access.

📜 Command sequence:

# Creating users

sudo adduser Alice

sudo adduser bob

​

# Creating a group

sudo groupadd staff

​

# Adding users to a group

sudo usermod - aG staff Alice

sudo usermod - aG staff bob

​

# Create a folder

sudo mkdir -p / srv / data

​

# Assigning owner and group

sudo chown root:staff / srv / data

​

# Assigning access rights

sudo chmod 770 / srv / data

🔐 Explanation:

• 770 - full rights for owner and group ( rwxrwx --- ), no one else has access
• staff — a group that controls access
• Alice and Bob are members of this group

🔷 SOLUTION: SETTING UP USERS AND PERMISSIONS (LINUX)

adduser alice # Creates the user alice

adduser bob # Creates user bob

groupadd staff # Creates a new group staff

usermod - aG staff alice # Adds alice to the staff group

usermod -aG staff bob # Adds bob to the staff group

mkdir / srv /data # Creates the directory / srv /data

chown :staff / srv /data # Sets the group owner of the folder to the staff group

chmod 770 / srv /data # Permissions: Only owner and group can read, write, execute

📌 Explanations:

• adduser is a convenient command for creating a user with a home directory.
• groupadd — adds a new group to the system
• usermod - aG — - aG means add the user to an additional group without removing them from others
• chown : staff — sets the owning group without changing the owner
• chmod 770 - allows only the group and owner to use the folder, others have no access

THANK YOU FOR YOUR ATTENTION.