4.2.7.1 Users Menu
The User Administration / Users menu allows the system administrator to administer users functions such as add, modify, delete, retrieve, and reset user password.
A user is someone who has been given permission with system administrator authority to log in to the user interface. The administrator creates these user accounts and associates them with the groups to which they belong. A user automatically has access to all actions allowed to the groups he is a member. In addition to the user's groups, the administrator can set other user-specific permissions or restrictions to any user’s set of individual permissions.
The ELAP user interface comes pre-defined with user interface users in order to provide a seamless transition to the user interface. This is done by duplicating the Unix user logins and permissions that existe on the text-based UI. In addition, The default password for a new uiadmin is uiadmin. See Table 4-3 for login names.
Table 4-3 ELAP UI Logins
| Login Name | Access Granted |
|---|---|
|
elapmaint |
Maintenance menu and all submenus |
|
elapdatabase |
Database menu and all submenus |
|
elapdebug |
Debug menu and all submenus |
|
elapplatform |
Platform menu and all submenus |
|
uiadmin |
User Administration menu |
|
elapall |
All of the above menus |
|
elapconfig |
Configuration menu and all submenus (text-based UI) |
The Users menu provides these actions:
4.2.7.1.1 Add User
The User Administration / Users / Add User screen lets the administrator add a new user interface user name and a default password.
4.2.7.1.2 Modify User
The User Administration / Users / Modify User screen lets the administrator change these aspects of a user permission profile.
The administrator must first select a user name from the list of current users.
User Permissions
After selecting a user name, the user permissions screen appears, as shown in Figure 4-39. In this screen, the administrator can view and specify the permissions allowed to the user, such as directly specifying the number of concurrent log-ins, an inactivity time limit, and a password age limit.
Figure 4-39 Specify the UI User's Permissions Screen
After modifying any of the direct entries, such as concurrent logins or inactivity, click the Submit Profile Changes button. A screen confirming the changes displays.
User Group Memberships
To customize the individual's access to groups, click the Modify Group Membership button in Figure 4-39. The Modify UI User's Group Membership Screen displays the group membership choices available for the user.
After making any changes to the user's group memberships, click the Submit Group Membership Changes button to submit the changes.
User Action Privileges
To specify the action privileges for the user, click the Modify Specific Actions button in Figure 4-39. The Modify UI User's Specific Actions Screen displays action privileges that can be specified for the user that is being modifying.
This screen contains many selections from which to choose. After customizing the settings, click the Submit Specific Action Changes button at the bottom of the screen.
The bottom of the Modify UI User’s Special Actions screen contains these explanatory notes:
-
A - Permission for this action has been explicitly added for this user.
-
R - Permission for this action has been explicitly removed for this user.
These notes indicate the privileges specifically added or removed for an individual user from the groups to which he/she is a member. This allows discrete refinement of user privileges even though he/she may be a member of groups.
4.2.7.1.3 Delete User
The User Administration / Users / Delete User screen lets an administrator remove a user name from the list of user interface names. First select the user name to be deleted and click the Delete User button. A confirmation screen appears, requesting approval of the change.
In the confirmation screen, click the Confirm Delete User button. After confirmation, a success screen is generated.
4.2.7.1.4 Retrieve User
The User Administration / Users / Retrieve User screen allows the administrator to display the user name permission profiles from the user interface information. First select a user name to be retrieved, and click the Select User button. The Retrieve UI User screen displays the permissions allowed to the selected user, including the maximum allowed number of concurrent log-ins and the inactivity time limit.
Group membership information for the user can be viewed by clicking the View Group Membership button.
User privileges can be accessed from the Retrieve UI User screen by clicking on the View Specific Actions button. The bottom of Retrieve UI User screen contains these explanatory notes:
-
A - Permission for this action has been explicitly added for this user.
-
R - Permission for this action has been explicitly removed for this user.
These notes indicate the privileges specifically added or removed for an individual user from the group to which he/she is a member. These permissions allow individual variations to user privileges even though the user is a member of a group.
4.2.7.1.5 Change System User Password
All system users can change their own passwords. The elapdev and appuser users use the passwd command provided by the Operating System. If changing a password using the passwd command, then the Linux PAM credit rules are used.
The system user elapconfig uses the option provided in the Figure A-11. Linux PAM rules are not applicable while changing the password for elapconfig user. Only the configured minimum password length applies.