In this section the application administrator can manage the user accounts. There are two types of user accounts:
local users - marked by blue bar in front of the row in the list
remote users (from AD/ADFS) - marked by green bar in front of the row in the list
For detailed information and differences see Types of users and their login process.
The administrator can create new local users by clicking the Add button above the list, see Add a user.
For existing users the administrator may invoke the following actions by clicking on the icons on the right side of the row:
 | Edit - Edit an existing user account. Displays a form and works similarly to Add a user. Only the password must be changed separately, see the action below. |
 | Send password reset token - a token will be sent to user’s email, which can be used to change his password. The token will expire according to the setting “Password reset link lifetime (sent by admin)” in Settings - Configuration - Security. Action is not available for remote users. |
 | Icon which displays a popup menu with more actions, which can be performed for each user. The following actions may be available: |
 | Set permissions. By default a user has all the permissions, but the administrator can revoke some of them. For details see User permissions. |
 | Change password - change a user's password. The new password must fulfill the complexity rules set in Settings - Configuration - Security. For remote users, the password cannot be changed. |
 | Multifactor authentication. Shows a list of set up second factors for the user’s authentication. The administrator can delete those from the list, which will enable the user to log in without the second factor, for example in case he looses it and needs to login without the multifactor authentication. |
 | Delete - deletes existing user’s account. After confirmation, the account is deleted and cannot be restored. |
0 Comments