Creating and Editing User Account

To create a user account:

In the web application:

Click the User button on the toolbar.
Select the Create User item in the drop-down menu of the User on the toolbar.

In the desktop application:

Select the New User context menu item.
Select the User > Create User main menu item.

After executing one of the operations, the Properties side panel opens in the web application or the User Properties dialog box opens in the desktop application. Set properties of the user being created.

The system may also require credentials of the user, who has user administration permissions on DBMS server, and also credentials required for granting repository object permissions. If a user is created in the repository based on PostgreSQL DBMS, the administrator should have the CREATEROLE privilege on the DBMS level.

NOTE. Creation of users is unavailable in repositories based on SQLite DBMS. In such repositories all work is executed by one fixed user - ADMIN.
When the roles of information security administrator and the application administrator are separated, only the application administrator may create new users. The User Properties dialog will show only the General Properties tab, all other tabs are available only for an information security administrator.

To edit user account:

In the web application select the user.
In the desktop application:

Select the Properties context menu item for the selected user.
Select the User > Properties main menu item for the selected user.
Double-click the selected user.

After executing one of the operations, the Properties side panel opens in the web application or the User Properties dialog box opens in the desktop application. Change user properties.

NOTE. When roles of information security administrator (ISA) and application administrator are separated, the ISA can manage group membership, access time and mandatory access control settings, while the application administrator can set up only general properties.

To change properties on creating and editing a user account, use the General Properties tab on the Properties side panel in the web application and in the User Properties dialog box in the desktop application.

Separating Roles between Administrators

On separating roles of information security administrator (ISA) and application administrator, the Member of Groups, Mandatory Access Control, Security Levels, Access Management and Available Printers tabs will be available only to ISA.

When the ISA does not have permissions to update user, after changing group of users or the list of privilege holders the system shows message that the changes will be applied only after the user is updated. To update users, contact the application administrator.

NOTE. Holders of the Applying User Permissions at DBMS Level privilege are determined on role separation.