1.10 Managing users
You can register, edit, and otherwise manage the user accounts used to log in to JP1/AO. You can also lock user accounts. You need User Management permission to perform most user management operations. More than one user can have User Management permission.
You can also manage users by linking with the authentication function of JP1/Base.
User management in JP1/AO involves the following:
- Editing user information
-
A user with User Management permission can edit the profiles of all users. Users without User Management permission can edit their own profile.
- Changing passwords
-
A user with User Management permission can change the passwords of all users. Users without User Management permission can change their own password.
You can set password criteria (such as minimum length and complexity) in the security definition file (security.conf).
- Changing User Management permissions
-
You can control who can manage users in JP1/AO by assigning or revoking User Management permission.
If you change the permission of a logged-in user, the user keeps his or her original permissions while logged in. The system administrator must instruct any such users to immediately log out and log back in.
However, if the user opens a window (User Management, User Profile, Service Definition, Submit Service, Plan summary, Service Details, Task Details, or Respond) in a new browser window, the latest set of permissions for that user apply in the new browser window.
- Locking and unlocking user accounts
-
You can lock and unlock user accounts.
If you lock the account of a logged-in user, that user will no longer be able to continue operations in JP1/AO.
A logged-in user cannot lock his or her own account. The account of a user who successively fails to log in a specified number of times is automatically locked. If all user accounts have been locked, you must use a command to unlock them.
You cannot lock and unlock the account of a user who logs in by using external authentication linkage.
- Important note
-
A user cannot manage or submit services without being assigned to a resource group and user group. Simply registering a user account is not sufficient.
Related topics
-
8.2 Setting of another user's information by an administrator
-
Security definition file (security.conf) in the Job Management Partner 1/Automatic Operation Configuration Guide
- Organization of this section