Parameters of General Properties

To change parameters of general user properties, use the General Properties tab in the User Properties dialog box in the desktop application and on the Properties side panel in the web application:

User. A unique user name among users and groups of users that is used on system login. A user name must consist of Latin letters, numbers, and underscores, and it must begin with a letter or a number.

NOTE. A user name is available for editing only on creating a user.

Full Name. Full user name (character string).
Short Name. An additional user short name which is used on granting permissions at the DBMS level.

NOTE. The fields is displayed only when the short name of domain user added to the DBMS is specified.

Description. User description, administrator may add it.
Startup Object. Use search to select the object that automatically starts at user login. An object available as read-only for the current user can be used as a startup object. If the user is no longer allowed to read the object selected as a startup object, this object is no more to open automatically when the user logs in to the system. If you need to open the entire repository when a startup object is selected, hold down the SHIFT key while clicking the OK button in the login dialog box.

NOTE. A repository startup object can be selected in addition to a user startup object. In this case a user startup object has a higher priority than a repository startup object. Startup is available only in the desktop application.

Password. This box is used to enter the password, that is, credentials that authenticate the user on system login. A password may begin with a number, letter or the "_" character and may contain Latin letters (a-z, A-Z), numbers 0-9, characters "_@#$&*%^".
Password Confirmation. Password confirmation is necessary to make sure the password has been entered in correctly.
User must Change Password at Next Login. If this checkbox is selected, the password change dialog box opens when the user is trying to log in to the system. The operation is executed only once when the user logs in to the system after this option was enabled. If administrator roles are separated, the checkbox is automatically selected:

When a new user is created by application administrator (or a user holding the Creating and Deleting Users privilege).
When user password is changed by information security administrator (or a user holding the Changing Security Label and Access Control List of Any Object privilege), if the User Cannot Change Password checkbox is deselected for this user.

User cannot Change Password. The user cannot change password, which is set in the security manager. When this checkbox is selected, the Change Password item of the Service menu of the object navigator is disabled for the user.
Password Never Expires. If the checkbox is set, the password policy settings concerning forced password changing (maximum or minimum password age) are not applied for user. When this attribute is used, the User Must Change Password at Next Login checkbox is dimmed.

Certificate. A user's fingerprint of certificate is added, which is presented to the user for authentication in the system. Two-factor authentication is enabled for the user. To add a certificate, use commands in the drop-down menu of the Add button.

Lock Account. If the checkbox is selected, the user cannot log in to the system using this account. The users list of the security manager displays locking icon next to names of the locked users: . The user is locked (this checkbox is automatically selected) if all attempts to enter the password on system login failed.
- Lock Account Forever (Account cannot be Unlocked). Selecting the checkbox locks the user permanently, the account cannot be unlocked. Clicking the OK button displays the request to confirm user locking forever:

Clicking the Lock Forever button locks the user with no possibility to undo it, clicking the Cancel button returns to user properties editing, the Lock Forever checkbox is not selected.

After the user is locked forever the Lock Account and Lock Forever checkboxes are selected and cannot be edited on opening properties of this user. In the list such a user is marked with a dimmed locking icon and grey text.

NOTE. In the web application, use the Lock or Lock Account or Lock Account Forever (Account cannot be Unlocked) button on the toolbar.

Connected from Server. This checkbox is available only when a user is created and only to the users who have the privilege of creating users. When the checkbox is selected, the system connects the user who has been earlier created at the server, that is, a new user is not created, but an existing server user is used. When the checkbox is selected, specify user identifier in the Name box. This identifier is to match user identifier at the server. When the checkbox is selected, the Password and Password Confirmation boxes become unavailable. The ability to change the user password remains and can be implemented using the Change Password main menu item.
Temporary Account Validity Period (Days) or Set Validity Period. This checkbox is selected to create a temporary account. By the end in the specified period the account is locked forever. This attribute is not applied to administrators.

NOTE. If roles of information security administrator and application administrator are separated:
•    For application administrator:
    - on viewing properties of the already existing user, all checkboxes, the Password and Password Confirmation boxes will be dimmed.
    - on creating a user, all checkboxes except for the Connected from Server checkbox will be dimmed.
•    For information security administrator on viewing properties of the already existing user the Startup Object box will be dimmed.