User Administration

Learn how to administer Policy Manager user accounts including performing a user search, adding and modifying a new user account, and deleting a user account.

Location: Security > Users section of the Policy Manager Management Console.

Table of Contents

Query Policy Manager to target user accounts that require administration.

Note: The security administration search options are case sensitive. When performing security administration and initiating a search using any of the security search options, search criteria must match the casing conventions used for each security option ( users, user groups).

  1. Go to Security > Users. All users that are currently defined for the selected domain are displayed.
  2. Apply filters:
    • Filter by Name—Filter search results by "Username" or "Full Name."
    • Filter by Domain—Use the drop-down list to filter search results by domain.
    • Match Type—Use the drop-down list to apply a match type to search criteria entered in the "Name" field. Choose either "Contains" or "Exact Match."
  3. Click Filter.

Add User Account

Launch the Add User Wizard

  1. Go to Security > Users.
  2. Click Add Users. The Define User Information screen displays.

Define User Information

  1. Enter account information into the Details section:
    • Username—Required. Up to 64 characters in length. Can be an abbreviation or nickname.
    • Full Name—Required.
    • Time Zone—Use the drop-down list to select the "Time Zone" for the current user. Defaults to the system time zone unless modified.
    • First Name—Optional.
    • Last—Optional.
    • Email—Enter the user's email address. Required if you are using Policy Manager email notification features.
    • Disabled—Check to disable a user account. The default state of a new user account is "active."
  2. Generate a password (manually enter or auto-generate a random password).

    Use Cases for "Manual Entry" Password Generation:

    • Administrator creating a user account for an end user—The end user can be a user accessing web services managed by Policy Manager or a user who needs to access the Policy Manager user interface.
    • Administrator creating user account for applications—An application is any custom application using our client SDKs.

    Use Cases for "Auto Generated" Password Generation:

    • Administrator/User generating a random password.
  3. Configure a password by clicking the radio button next to the desired generation method.
    • Manual Entry—Enter a custom password key into the Password field and then confirm it.
    • Auto Generate—The generated password (key) will display on the User Information section of the Completing the Add User Wizard screen when the user account creation process is complete.
    • Force Password Change on Next Login—Requires user to specify a newly changed password on the next login.
  4. (Optional) Click the check box next to Expire User to specify an expiration date for the user account:
    • Click the field display. A Calendar pop-up displays.
    • Navigate to the desired expiration date and click your selection to populate the field.
    • Navigate using the right and left arrow keys located on the menu bar, or select the month and/or year using the drop-down lists.
    • The date entry is formatted as mm/dd/yyyy.

View Completion Summary

  1. Click Next. The Completing the Add User Wizard screen displays, providing a summary of the user account configuration.
  2. Review your user account definition.

Modify User Account

The "Modify User" screen presents user account information in a consolidated view. You can change all of the user account configuration settings with the exception of username. You can update:

  • Account details
  • Password
  • Expiration date
  • Pin
  • Default page of an existing custom user account definition.

Note: The values for Password, Password Confirm, Pin Number, and Pin Number Confirm are truncated to four characters for security purposes.

After you have completed configuring the User Information, click Apply.

If you do not edit these fields, the initial values are maintained.

If you change the password generation method to "Auto Generated" and click the View the generated password check box, the auto-generated password displays on the Modify User screen after you apply your changes.

  1. Go to Security > Users.
  2. Click Modify User. The Modify User screen displays.

Details

  • Username—Non-editable. Shows the username defined in the initial "Add User" process.
  • Full Name—Required.
  • First Name—Optional.
  • Last Name—Optional.
  • Email — Note: Required if you are using Policy Manager email notification features.
  • Disable—Update the default state.
    • Uncheck Disabled to activate the account.
    • Check Disabled to deactivate the account.

Password

  1. Configure a password by clicking the radio button next to the desired generation method.
    • Manual Entry—Enter a custom password key into the Password field and confirm it.
      • Used when modifying an account for end users who are either accessing web services managed by Policy Manager or accessing the Policy Manager user Interface.
      • Used for creating a user account for any custom application using our client SDKs.
    • Auto Generated—Enter an encryption seed in to the Seed field and then re-enter it into the Seed Confirm field.
      • Used when an Administrator/User wants to create an auto-generated random password key.
  2. Check View the generated password—Optional.

    The generated password (key) will display in a Modify User window after you complete the user account update process and click Apply.

  3. Check Force password change on next login—Optional.

Expire User Account

Specify an expiration date for the user account.

  1. Click the Expire User check box.
  2. Click the field display. A Calendar pop-up displays.
  3. Navigate to the desired expiration date and click your selection to populate the field.
    • Navigate using the right and left arrowkeys located on the menu bar, or select the month and/or year using the drop-down menus.
    • The date entry is formatted as mm/dd/yyyy.

Delete User Account

There are two types of user accounts:

  • Reserved user accounts
  • Custom user accounts

Reserved User Accounts—notes:

  • Automatically created during initial Policy Manager configuration.
  • Configured with roles and privileges to to facilitate the proper runtime of the Policy Manager system.
  • Read-only and cannot be deleted from the system.
  • Display on the Users Summary screen with a check box in the Read-Only column.

Custom User Accounts—Notes:

  • Defined in the Policy Manager Subsystem.
  • Not read-only and can be deleted from the system.
  • Upon delete attempt, a custom confirmation that includes the user account name is displayed.

To delete a custom user account

  1. Go to Security > Users.
  2. Select a custom user account.

    Note: a custom user account does not display a check box in the Read-Only column.

  3. Click Delete User.
  4. At the confirmation message, click OK.