Creating and Editing User Account

To create a user account:

In the web application:

Click the User button on the toolbar.
Select the Create User item in the drop-down menu of the User button on the toolbar.

In the desktop application:

Select the Create User context menu item.
Select the User > Create User main menu item.

After executing one of the operations the Properties side panel opens in the web application or the User Properties dialog box opens in the desktop application. Set properties of the user being created.

The system may also require credentials of the user, who has user administration permissions on DBMS server, and also credentials required for granting repository object permissions. If a user is created in the repository based on PostgreSQL DBMS, the administrator should have the CREATEROLE privilege on the DBMS level.

NOTE. Creation of users is unavailable in repositories based on SQLite DBMS. In such repositories all the work is executed by one fixed user - ADMIN.
When roles of the information security administrator and the application administrator are separated, only the application administrator can create new users. The User Properties dialog will show only the General Properties tab, all other tabs are available only for the information security administrator.

To edit user account:

In the web application select the user.
In the desktop application:

Select the Properties context menu item for the selected user.
Select the User > Properties main menu item for the selected user.
Double-click the selected user.

After executing one of the operations the Properties side panel opens in the web application or the User Properties dialog box opens in the desktop application. Change user properties.

NOTE. When roles of the information security administrator and the application administrator are separated, the ISA can set up group membership, access time and mandatory access control, while the application administrator can set up only general properties.

To change properties when creating and editing a user account, use the General Properties tab on the Properties side panel in the web application and in the User Properties dialog box in the desktop application.

Separating Roles between Administrators

When roles of the information security administrator (ISA) and the application administrator (AA) are separated, the Member of Groups, Mandatory Access Control, Security Levels, Access Control, and Available Printers tabs will be available only to the ISA.

When the information security administrator does not have permissions to update users, after changing the user group or the list of privilege holders the system shows a message that the changes will be applied only after the user is updated. To update users, contact the application administrator.

NOTE. Holders of the Applying User Permissions at DBMS Level privilege are determined on role separation.