Differences

This shows you the differences between two versions of the page.

--- user_config [2022/03/07 18:10] – [Configure user accounts] yves
+++ user_config [2022/04/04 20:20] (current) – [Add new user accounts] yves
@@ Line 1: / Line 1: @@
 ===== Configure user accounts =====
+==== Add new user accounts ====
+To add a user click on the "Add" button on the top right of the table.
+{{ :user3.png?nolink&400 |}}
-  * The "Last login" column displays each user's last successful login date.
+The following fields can be defined for each user:
-  * The "Local" column indicates whether or not a user is managed by PMA.core or LDAP.
-  * The "Administrator" column indicates whether or not a user can access PMA.core. Non administrator users cannot perform system management tasks within PMA.core.
-  * The "Can Annotate" column indicates whether or not a user is allowed to create and edit annotations.
-  * The "Suspended" column indicates whether or not a user is currently allowed to login to either PMA.core or downstream applications. A suspended login is treated as invalid by the system.
-  * The "Locked out" column indicates whether or not a user is currently locked out due to consecutive invalid log in attempts.
-  * Clicking on a user's email address launches your default email client.
-  * Clicking on a user's login name displays a summary of the user's activity.
-Next to each entry the following buttons appear:
+{{ :user4.png?nolink&400 |}}
-{{ :user2.png?nolink&600 |}}
+^ Field ^ Description ^
+|First Name | The user's first name |
+|Last Name| The user's last name|
+|Login| The username, it must be unique irrespective of its casing, if "UsEr" exists "uSeR" cannot exist|
+|Password| The user's password|
+|Confirm Password| Insert the password again for confirmation|
+|Generate Password (button)|Auto-generates a password, according to [[settings_server#password_generation|pre-set conditions]]|
+|Email| The user's email. Must be unique if the corresponding [[settings_server|server setting]] is enabled |
+|Administrator| Whether the user is an administrator, can login to the administrator UI and use the [[https://docs.pathomation.com/pma.core.api/#/Admin|Admin API]]|
+|Can Annotate| Whether the user can create new annotations on slides|
+|Suspended| Whether the user is suspended, i.e. cannot authenticate and perform any action on the server|
+==== Modify user accounts ====
-==== Add new user accounts ====
+After creating a user you can click on the //Edit// button to modify an existing user. The page and fields are exactly the same as the //Create User// page (see previous paragraph). The only difference in this page is the ability **to leave the password/confirm password fields empty,** and the server will not change the user's password.
-==== Modify user accounts ====
+==== Other actions ====
+{{ ::user_actions.jpg?600 |}}
+Clicking on the down arrow in the user's list page you can see additional actions that can be performed on a user. Those actions are:
+  * Remove: This action will delete the user
+  * Remind password: Will send an email to the user with his password
+  * Reset password: This will set a new random generated password for this user and then sent an email containing the new password
+  * Unlock: Unlocks a locked out user, after too many unsuccessful login attempts [[user_states|(see user states)]]
-==== Delete user accounts ====
 ==== Audit trailing ====
+Clicking on the Audit Trail tab of a user will display a chronological list of all changes performed to a user, as well as all changes performed to the access list of that user [[access_control|(see access control lists)]]
+This list contains the following useful info about a change in chronological order:
+  * ActionType: The type of a change i.e. whether the user was created, updated or deleted
+  * EventDate: The date the change occurred
+  * UserLogin: The user that performed the change
+  * List of user's field: The previous value for this user, and the changed value
+{{ ::user_audit_trail.jpg?600 |}}
+==== Activity Log ====
+Clicking on the Activity Log tab will display a comprehensive list of all activities performed by the user over time. There are four sections in this page each displaying the following information:
+  * System Access Log: The authentication's performed by the user, successful or not. If it was successfull the session id will be also displayed
+  * Slide Access Log: All slides that were accessed/viewed by the user along with the date, slide path and name
+  * Form Access Log: The form's and form data that were accessed by the user
+  * Latest events: all logged events for this user [[report_events|(see events)]]
+{{ :user_activity_log.jpg?600 |}}
+=== ACL ====
+Clicking on the ACL tab will display a list of all [[access_control|root directories]] with private access and whether this user has access to each one of those. You can also [[rootdir_security#access_control_lists|grant or remove access]] to a particular root directory for this user.
+{{ ::user_acl.jpg?600 |}}