Users

The Users view summarizes all tasks relating to the management of users. Logged-in users can create, edit and remove users here, as well as manage their Privileges. All these options are available via the toolbar or context menu (displayed by right-clicking the row for the relevant user in the table). Several toolbar buttons or context menu items are disabled by default, but will be enabled if at least one user is selected.

The following description differentiates between System Users and standard users because there are differences in the menus and options available. These depend on the type of user logged in and, in the case of a System User, the Customer currently selected.

The left pane shows the User Management sub-menus, with the current view highlighted. The main part of the window contains a table listing all users along with a subset of their properties. This user list supports multiple selections. The table's status bar shows the total number of users as well as the number of users currently selected. It shows the time stamp of the view's last refresh.

The toolbar and context menu differ according to the type of user logged in. Standard users need to have Privileges assigned to them in order to be able to view and operate several of the menu options. The menus available to logged-in System Users vary depending on the current Customer, as selected using the Customer Switch. The differences are explained in the sections describing each menu item.

Refresh

User/System User
This menu item is used to refresh the list of users. The Users table status bar shows the time stamp of the last refresh.

Create

User
This menu item is used to create new users. The creation of new users does not depend on selected users. The user created is assigned automatically to the logged-in user's Customer. Clicking Create opens a wizard that guides users through the user creation process.
To perform this operation, logged-in users must have the User Create / Edit Privilege.

System User
This menu item is used to create new users or System Users. The creation of new users does not depend on selected users. The user created is assigned automatically to the Customer currently selected by the Customer Switch. Users created in Customer [System] are System Users. Clicking Create opens a wizard guiding users through the user creation process.

For a detailed description of the Create User wizard, please click here.

Edit

User/System User
To enable this menu item and perform the modification, exactly one user must be selected. Clicking Edit opens a wizard that guides users through the user modification process.
To perform this operation, standard users must have the User Create / Edit Privilege.

For a detailed description of the Edit User wizard, please click here.

Remove

User/System User
To enable this menu item and perform the removal, at least one user must be selected. Clicking Remove opens a wizard that guides users through the user removal process.
To perform this operation, standard users must have the User Delete Privilege.

Reset Password

User/System User
To enable this menu item and perform the reset, exactly one user must be selected. Clicking Reset opens a wizard that guides users through the password reset process.
To perform this operation, standard users must have the User Create / Edit Privilege.

The password for users of type Active Directory cannot be modified in Central Server® User Management.

Roles > Grant Roles

User
To enable this menu item and grant roles to selected users, at least one user must be selected first. Clicking Grant Roles opens a wizard that guides users through the role granting process. The menu item is enabled if at least one user is selected.
To perform this operation a user must have the User Create / Edit Privilege.

System User
When a standard user is selected, roles are granted as if a standard user were logged in. This menu item does not exist for System Users as this type of user has unlimited access to all web applications and thus does not require Privileges.

Roles > Revoke Roles

User
To enable this menu item and perform the revocation of user roles, at least one user must be selected. Clicking Revoke Roles opens a wizard that guides users through the role revoking process.
To perform this operation, users must have the User Create / Edit Privilege.

System User
When a standard user is selected, the role revocation is carried out as if a standard user were logged in. When a System User is selected, this menu item does not exist as System Users have unlimited access to all web applications and thus do not require Privileges.

Privileges > Grant Privileges

User
To enable this menu item and grant Privileges to selected users, at least one user must be selected. Clicking Grant Privileges opens a wizard that guides users through the Privilege granting process.
To perform this operation, users must have the User Create / Edit Privilege.

System User
When a standard user is selected, Privileges are granted in the same way as by standard users. When a System User is selected, this menu item does not exist as System Users have unlimited access to all web applications and thus do not require Privileges.

Privileges > Revoke Privileges

User
To enable this menu item and revoke Privileges at least one user must be selected. Clicking Revoke Privileges opens a wizard that guides users through the Privilege revocation process.
To perform this operation, users must have the User Create / Edit Privilege.

System User
When a standard user is selected, Privileges are revoked in the same way as by standard users. When a System User is selected, this menu item does not exist as System Users have unlimited access to all web applications and thus do not require Privileges.

Inherit Privileges

User
To enable this menu item and allow selected users to inherit roles and Privileges, at least one user must be selected. Clicking Inherit Privileges opens a wizard that guides users through the inheriting process.
To perform this operation a user must have the Privilege User Create / Edit.

Activate

User/System User
At least one user must be selected before this menu option can be used. Clicking the Activate button will open a prompt asking you to confirm whether the selected user(s) should be activated.
To perform this operation, standard users must have the User Create / Edit Privilege.

Deactivate

User/System User
At least one user must be selected before this menu option can be used. Clicking the Deactivate button will open a prompt asking you to confirm whether the selected user(s) should be deactivated.
Deactivated users will be unable to log in to Central Server®.
To perform this operation, standard users must have the User Create / Edit Privilege.

Clean Up

User/System User
Use this option to delete users from Central Server® User Management when they are no longer present in the Active Directory associated with the selected Customer. This operation will check all users associated with the selected Customer. Click the Clean Up button to compare the list of users of type Active Directory against the list of users in the associated Active Directory. Users that are no longer present in the Active Directory can then be deleted.
To perform this operation, standard users must have the User Delete Privilege.

Detailed View

Clicking a User Name in the user list opens its detailed view showing properties depending on the logged-in user's type (system/standard user). In the case of a logged-in System User, properties also depend on the current Customer, as selected using the Customer Switch. User Names that can be selected are highlighted when the mouse is hovered over them.

The quick-select Users menu in the left pane allows users to select a detailed view of another user. The list of user names can be reduced/filtered using the text field.

As well as the User Details (Customer, name, time zone, etc.), the detailed view contains three additional views for Privilege management: Privileges listing all Privileges directly granted to the user, Effective Privileges listing all Privileges either directly granted to the user or inherited through roles, and Roles listing all roles directly granted to the user.

The detailed view is implemented as a portal, i.e. the small windows (also called portlets) may be rearranged by drag & drop as required. Clicking the small arrow on the right of the upper section minimizes the portlets.

The logged-in user's type (and, in case of a System User, the currently selected Customer) determine the detailed view's content. This is true for the menu as well. Please see above for a detailed description of each menu item.

Create User wizard

The Create User wizard guides you through the process of setting up a new user.

First, select whether the new user should be authenticated locally or via the Active Directory.

To use a user from the Active Directory, enter part of the user's name into the search box and click on the magnifying glass symbol to the right.

Please note that the search results window will only show those users that are stored in Containers specified in the Active Directory configuration.

Wizard Create User - Account Type - Search Results

The User Details will be copied from the Active Directory, however the information can all be edited (with the exception of the login name and password). If the user account type Local Account was selected, then a password must also be entered and confirmed at this point.

Roles and Privileges can be granted to the user individually, or inherited from another user.

Wizard Create User - Roles and Privileges

A summary page detailing the properties associated with the user is displayed before saving.

Edit User wizard

The Edit User wizard guides you through the process of changing a user's details. It is very similar to the Create User wizard.

Click on the Update information from AD symbol to synchronize the user's details with the Active Directory.

If the user's login name is changed in the Active Directory®, update and login of this user are no longer possible. In this case the user has to be deleted from Central Server® and created anew as described above.