Setting General User Profile Attributes

Access the User Profiles - General page (select PeopleTools, and then Security, and then User Profiles, and then User Profiles and click the General tab).

This example illustrates the fields and controls on the User Profiles - General page.

Logon Information

Field or Control	Description
Symbolic ID	Enter a value to retrieve the appropriate encrypted access ID and access password. This value determines which access ID and password are used to log the user onto the database after the system validates the user ID. The access ID is required only when a user needs to connect directly to the database (in two-tier), and when users submit jobs using Process Scheduler. The access ID is not required with the portal or if you use a Lightweight Directory Access Protocol (LDAP) directory server to manage user IDs. With PeopleSoft Pure Internet Architecture, the application server maintains the connection to the database, so the application server must submit an access ID.
User ID Alias	Enter a fully qualified email ID (email address) as a user ID alias. For example, tom.x.sawyer@oracle.com could be the user ID used to sign in to the system. The maximum character length is 70.
Edit Email Addresses	If a user is part of the workflow system or you have other systems that generate email for users, click this link to enter an email address for a user. You can enter multiple email addresses for a user, but you must select one as the primary email address. The system allows only one email address per type. For example, you cannot enter two home email addresses. The Email Addresses interface has the following controls: Primary Email Account: If you enter multiple email accounts, you must select one as the primary account. Email Type: Select from Blackberry, Business, Home, Other, or Work. The Blackberry email type is used with the Workflow/RIM technology. Email Address: Enter the email address in this field.

Field or Control

Description

Symbolic ID

Enter a value to retrieve the appropriate encrypted access ID and access password. This value determines which access ID and password are used to log the user onto the database after the system validates the user ID.

The access ID is required only when a user needs to connect directly to the database (in two-tier), and when users submit jobs using Process Scheduler. The access ID is not required with the portal or if you use a Lightweight Directory Access Protocol (LDAP) directory server to manage user IDs.

With PeopleSoft Pure Internet Architecture, the application server maintains the connection to the database, so the application server must submit an access ID.

User ID Alias

Enter a fully qualified email ID (email address) as a user ID alias. For example, tom.x.sawyer@oracle.com could be the user ID used to sign in to the system. The maximum character length is 70.

Edit Email Addresses

If a user is part of the workflow system or you have other systems that generate email for users, click this link to enter an email address for a user. You can enter multiple email addresses for a user, but you must select one as the primary email address. The system allows only one email address per type. For example, you cannot enter two home email addresses.

The Email Addresses interface has the following controls:

Primary Email Account: If you enter multiple email accounts, you must select one as the primary account.
Email Type: Select from Blackberry, Business, Home, Other, or Work.

The Blackberry email type is used with the Workflow/RIM technology.
Email Address: Enter the email address in this field.

Password Administration

Field or Control	Description
Change Password?	When you select this option, the Password and Confirm Password fields, and the Generate/Email New Password button, appear. See the example following this table.
Password and Confirm Password	Enter the password string that the user must supply when signing in. The value in the Confirm Password field must match that in the Password field. The maximum password length is 64 characters. Note: These values are required to sign in to the system, but you can save the profile without populating these fields.
Password Expired?	If you are using PeopleSoft password controls, this option enables you to force users to change their passwords in the following situations: The first time that a user signs in to PeopleSoft software. The next time that a user signs in. The first time that a user signs in after the system has emailed the user a randomly generated password. Note: To use this option, you must enable the Password Expires in 'x' Days PeopleSoft password control. See Setting Password Controls. When a user's password has expired, the Password Expired check box becomes enabled and selected. By deselecting the check box and saving the change, you can renew the password, although we do not recommend this practice. Note: The password expiration applies only to signing into the system through the PeopleSoft Pure Internet Architecture (PIA). When you log in to PeopleTools utilities such as Application Designer, Application Engine, or Data Mover, the password expiration control does not apply. For example, if you try to use an expired password to sign in to PIA, you will see an error message, but you can use the same password to sign into Application Designer.
Generate/Email New Password	Click to generate a new password and send it to the primary email address defined for the user ID. Note: The fields to enter and confirm a password are made inactive when this button is clicked. If the action to send the password fails when the page is saved, an error message appears and the Password and Confirm Password fields are enabled.

When you select Change Password, the options to create a password appear—Generate/Email New Password, New Password, Confirm Password, and Password Policy. Password Policy is a list of the rules controlling length, allowed characters, and durations for passwords, as defined on the Password Controls page.

See Setting Password Controls.

For information on how end users can change their passwords see Changing Passwords.

This example illustrates the Password Administration section after the Change Password option has been selected.

User Profiles - General page after clicking Change Password

General Attributes

Field or Control	Description
Language	Select a value. The language code on the User Profile page has a limited use. For example, when a user runs a batch job, the system needs to know in which language to generate the reports for the user who submitted the job. In PeopleSoft Pure Internet Architecture, the user’s language preference is based on the selection that the user makes on the signon page. For Microsoft Windows workstations, the user’s language preference is derived from the Display tab in PeopleSoft Configuration Manager. For the Microsoft Windows environment, the value specified as language code in the user profile acts as a default in case the language code is not specified in PeopleSoft Configuration Manager.
Currency	If the user works with international currencies, select a currency code to reflect the native or base currency. Values will appear in the currency with which the user is familiar.
Default Mobile Page	Select the mobile homepage that should appear after users sign in to their mobile device. Important: PeopleSoft Mobile Agent is a desupported product. These features exist for backward compatibility only.
Enable Expert Entry	Select to specify that some users, such as expert or power users, can defer all processing of the data that they enter. This selection enables users to reduce the number of trips to the server for data processing, regardless of how the developer set field deferred or interactive processing. You enable this option in a component in Application Designer, and you specify which users have this option using the Enable Expert Entry check box. Deselect this check box to prevent a user from specifying deferred processing.
Allow Switch User	Select this option to designate users who can change identities in a PeopleSoft system. This feature applies only when accessing PeopleSoft applications using a browser; it has no effect on two-tier or three-tier connections. The default for this feature is hidden. You display this check box by changing the Enable Switch User options on the PeopleTools Options page. See System and Server Administration: Using Administration Utilities

Permission Lists

Field or Control	Description
Navigator Homepage	Enter a value associated with PeopleSoft Workflow.
Process Profile	Displays a value that contains the permissions that a user requires for running batch processes through PeopleSoft Process Scheduler. For example, the process profile is where users are authorized to view output, update run locations, restart processes, and so on. Note: Only the process profile comes from this permission list, not the list process groups.
Primary and Row Security	Displays which data permissions to grant a user by examining the primary permission list and row security permission list. Which one is used varies by application and data entity (employee, customer, vendor, business unit, and so on). Consult your application documentation for more details. The system also determines mass change (if needed), and definition security permissions from the primary permission list.

Field or Control

Description

Navigator Homepage

Enter a value associated with PeopleSoft Workflow.

Process Profile

Displays a value that contains the permissions that a user requires for running batch processes through PeopleSoft Process Scheduler. For example, the process profile is where users are authorized to view output, update run locations, restart processes, and so on.

Note: Only the process profile comes from this permission list, not the list process groups.

Primary and Row Security

Displays which data permissions to grant a user by examining the primary permission list and row security permission list. Which one is used varies by application and data entity (employee, customer, vendor, business unit, and so on). Consult your application documentation for more details.

The system also determines mass change (if needed), and definition security permissions from the primary permission list.

Account Lock

Field or Control	Description
Allow Lock	When Allow Lock is selected, the user account obeys any applicable password controls and can be locked out. This option is selected by default. If this option is not selected, the password controls for the user profile are bypassed. When this option is cleared the Lock as of and Is Locked options are made unavailable. The security administrator should be aware that clearing this option removes security controls for the user's password. See Setting Password Controls.
Lock as of	Specify a date to lock the account. Enter a date or click the calendar icon to select a date. The user will not be able to sign in after this date. If you set a date in the future, when the date is reached or past the system makes the Lock as of field unavailable for entry, and selects the Account Locked Out? check box. If you set a date in the past, the system automatically makes the Lock as of field unavailable for entry, and selects the Account Locked Out? check box. If the security administrator unlocks a locked account and the date specified here is past, the system removes the date and makes the field available for entry. If the security administrator unlocks a locked account and the date specified here is in the future, the field will remain available and the date unchanged.
Is Locked	Select this check box to deactivate a user profile for any reason. The user cannot sign in until you have deselected this option. The system automatically selects this check box if you are using password controls and the user exceeds the maximum number of failed logon attempts. The administrator needs to manually open the user profile and deselect this check box to reinstate the user.

Field or Control

Description

Allow Lock

When Allow Lock is selected, the user account obeys any applicable password controls and can be locked out. This option is selected by default.

If this option is not selected, the password controls for the user profile are bypassed. When this option is cleared the Lock as of and Is Locked options are made unavailable.

The security administrator should be aware that clearing this option removes security controls for the user's password.

See Setting Password Controls.

Lock as of

Specify a date to lock the account. Enter a date or click the calendar icon to select a date. The user will not be able to sign in after this date.

If you set a date in the future, when the date is reached or past the system makes the Lock as of field unavailable for entry, and selects the Account Locked Out? check box.

If you set a date in the past, the system automatically makes the Lock as of field unavailable for entry, and selects the Account Locked Out? check box.

If the security administrator unlocks a locked account and the date specified here is past, the system removes the date and makes the field available for entry.

If the security administrator unlocks a locked account and the date specified here is in the future, the field will remain available and the date unchanged.

Is Locked

Select this check box to deactivate a user profile for any reason. The user cannot sign in until you have deselected this option.

The system automatically selects this check box if you are using password controls and the user exceeds the maximum number of failed logon attempts. The administrator needs to manually open the user profile and deselect this check box to reinstate the user.