Exploring the Settings Application

Now that Tachyon has been installed and the 1E Client deployed, and we have explored the Tachyon Portal and the Applications, we are ready to configure Tachyon. Before we can use Tachyon, we need to create some users and assign them roles, so they can administer the system. The install account we used to install Tachyon has very limited rights to administer Tachyon, one of them being the ability to add new users and configure new roles. Thus, you want to install with an account which you will not be using for administration in Tachyon, beyond managing users/roles and adding Instruction Sets.

Configuring Tachyon Users and Roles

Configure Tachyon Users and Roles

1. Log onto 1ETRNAP as 1ETRN\AppInstaller
2. Launch the Tachyon Portal via https://tachyon.1etrn.local/tachyon using Google Chrome
3. Create a Bookmark to the Portal – we will be using this often
4. Launch the Settings Application
5. Navigate to Permissions - Users, note that only one actual user exists: 1ETRN\AppInstaller
This is the account we installed Tachyon with. It has limited rights in Tachyon, one of which is the ability to manage users and roles.
6. Navigate to Roles - Review the default roles and their descriptions
These are very granular roles, which might be used in some environments. However, usually you will want to have a combination of these roles applied to individual users or AD groups.
7. On the Users tab, click the Add button to the far right to add a new user
8. In the Add user box in the middle, start typing tachyon_admins and Select Tachyon_admins when it resolves from the suggestion list. Click Add
9. Repeat the process to add 1ETRN\Tachyon_adminG as a user and then select the Tachyon_AdminG account by clicking in the Name column. Click Edit in the far right. Select Global Approvers and click Save
10. Navigate to Users and Click on Tachyon_Admins
11. Click Edit and add the following roles to the Tachyon_Admins group – Global Actioners, Global Approvers, Instruction Set Administrators. Click Save. Select the Group Members tab
Why is this page empty? Hint – you will find out in the next task.
12. Navigate back to Users and click on the AppInstaller user and note the roles that are assigned to this user
Note all the Roles that are available in Tachyon. If you are familiar with the previous versions of Tachyon you will notice a significant increase.

13. Log onto 1ETRNDC as 1ETRN\Administrator
14. From the start menu, launch Active Directory Users and Computers
15. Under the Users node, locate the Tachyon_admins group
16. Double-click the group, and click on the Members tab. Note that there are no members in this group
17. Click the Add button
18. We installed Tachyon using the LDAP for Active Directory. We can use any Global or Universal Security Groups from Active Directory. If we had used GC(Global Catalog) variable for Active Directory, any groups we want to use in Tachyon must be configured to be universal for Tachyon to have visibility to them
19. In the search box, type in Tachyon_admin and hit the Check Names button
20. Multi select tachyon_admin1 and tachyon_admin2. Click OK. Click OK
21. Ensure the correct users have been added. Click OK

22. Return to the Tachyon Portal - Settings Application on 1ETRNAP
23. Navigate to Permissions – Users Click on 1ETRN\Tachyon_admins user, and click the GroupMembers tab at the top
Note it displays the members we just added to that group.
24. Click the Roles tab at the top. Notice that we have the Global Actioners role, the Global Approvers role and Instruction Set Administrators role

Adding Additional Users and Roles

We need to add some additional users and roles in Tachyon for our upcoming exercises

25. Return to the Settings Application from the Tachyon Portal
26. Navigate to Permissions - Users and add the following users and their roles:

User	Role(s) to assign
1ETRN\User	Experience Viewers Guaranteed State Viewers Inventory Viewers Patch Success Viewers
1ETRN\Manager1	Guaranteed State Administrators Instruction Set Administrators
1ETRN\Tachyon_adminPP	Global Administrators
1ETRN\TachyonConnector	Connector Administrators Global Questioners Instruction Set Administrators Inventory Administrators Management Group Sync Initiators Schedule Administrators

Exploring the Settings Application

27. Still logged in as 1ETRN\AppInstaller
28. Look at the other nodes of the Settings Application. Configuration, Monitoring and Instructions we will look at these in greater detail in later exercises
29. Click Switch app Notice that we can only switch to Explorer
This account does not have access to Experience, Guaranteed State, Inventory or Patch Success, so those options do not even appear in the navigation.

Exploring the Explorer Application

In this exercise, we will log on as different users and look at the Explorer Application based on what permissions each user has.

View as Global Actioners, Global Approvers, and Instruction Set Admins

30. Log into 1ETRNW71 as 1ETRN\Tachyon_admin1
31. Launch the Tachyon Portal by opening a browser and navigate to https://tachyon.1etrn.local/tachyon in Google Chrome
If the machine is already logged in, log out and log in with the account listed above.
32. Add the Tachyon Portal as a bookmark on each of the devices
33. Open the Settings Application at the bottom of the page. Note only the Instructions Node is available
34. Click on Switch app at the bottom and Navigate to Explorer
If you are familiar with the prior versions of Tachyon – this is our Explorer Application
35. Navigate around and notice which nodes are available. Click Switch app to try to navigate to the other applications
We configured the Tachyon_admins AD group with granular security roles (Instruction Set Administrators, Global Actioners, and Global Approvers), thus only nodes and Applications applicable to those roles will be visible.
36. Stay logged in and leave the console running, we will revisit this machine with this logged in user later in the labs

View of Guaranteed State Administrators

37. Log onto 1ETRNW72 as 1ETRN\Manager1
38. Launch Google Chrome and navigate to https://tachyon.1etrn.local/tachyon
39. Launch the Guaranteed State Application create a bookmark
Manager1 is our Guaranteed State Administrator and could also access Guaranteed State without going through the Tachyon Portal via https://tachyon.1etrn.local/tachyon/app/#/guaranteedstate
40. Launch each of the nodes to see what they contain. There will not be much data yet as we have not created any policies. We will revisit this in later exercises
41. Notice that 1ETRN\Manager1 has no access to any of the other applications in the Tachyon Portal. It can see the Explorer Application in Switch App but cannot navigate there as all of the responses will be passed into the Guaranteed State Application

View as a Global Approver

42. Log onto 1ETRNW73 as 1ETRN\Tachyon_adminG
43. Navigate to https://tachyon.1etrn.local/tachyon in Google Chrome
44. Launch the Explorer application. Note the nodes available for this account
1ETRN\Tachyon_adminG is our Global Approver role, so it only has access to the Explorer Application to approve instructions. You can see that it does not have access to any of the other applications in the Tachyon Portal.
45. Expand the Devices node, and click on Table
46. Note that 7 clients are shown in the top pane, each with an Online status. If any machines show as being offline, check to ensure they are powered on
There might be machines that haven't yet run the installation package via SCCM. Carry on with the labs, they'll show up in due time.
47. Navigate to Devices – Dashboard. Have a look at the items that are available to this user
48. Navigate to Notifications. Notice that it is empty as we do not have any instructions yet
49. Leave the browser open we will be back to this one in a bit
50. Click on the Start button in Windows, and in the search box type Calc. Click on the Calculator application and launch it. Minimize it and leave it running
We will be using Tachyon to kill the Calculator application in a later exercise, so we're prepping the environment for Tachyon usage labs.

View as Experience, Guaranteed State, Inventory and Patch Success Viewer

51. Log onto 1ETRNW101 as 1ETRN\user
52. Navigate to https://tachyon.1etrn.local/tachyon in Google Chrome
53. Launch the Explorer application from the Tachyon Portal
1ETRN\User is our Experience Viewer, Guaranteed State Viewer, Inventory Viewer and Patch Success Viewer. This user can only view these applications.
54. Launch the Experience Application
55. Launch the Guaranteed State Application
56. Launch the Inventory Application
57. Launch the Patch Success Application
At this point you may see an error fetching data or no data for any of these applications, we will revisit later, but this is to give a feel for each application
58. Explore the nodes to get a feel for the applications

View as Global Administrator

59. Log onto 1ETRNW102 as 1ETRN\Tachyon_AdminPP
60. Launch Google Chrome and navigate to https://tachyon.1etrn.local/tachyon
61. Launch the Settings Application
62. Notice the increased number of nodes. 1ETRN\Tachyon_AdminPP is our Global Administrator and has access to all of Tachyon
63. Navigate to Configuration – License Information
64. Review the License properties for our lab
65. Later in the labs when we create our own instructions, we will review the properties of our license and how that applies to creating Instructions
66. Navigate to the other nodes and Applications to review the options
67. Stay logged into 1ETRNW102. We will be revisiting the machine once we start using Tachyon

Lab Summary

In this lab, we explored the Tachyon Portal and the different applications under different user contexts. We validated the role-based security we applied on different users and groups. Finally, we navigated into the different nodes within the applications to get a feel for the product.

Next Page
Ex 4 - TCN Opr v5.0 - Instruction Sets and Management Groups