Versions Compared

Old Version 1

changes.mady.by.user Stonebranch

Saved on

compared with

New Version Current

changes.mady.by.user Stonebranch

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Panel
Table of Contents
maxlevel2

...

The default Universal Controller user is ops.admin. It is assigned to one of the default Universal Controller groups, Administrator Group.

Default Groups

There are two default groups:

...

The following details identifies the roles and permissions required to read and update user details.

RolesPermissionsFields
  • ops_admin
  • ops_user
-
  • _admin
  • Read any user.
  • Edit any user.
  • All
  • ops_service
_role
  • Read any user
.Update specific fields in its own details (see Fields)
  • .

  • First Name

  • Middle Name

  • Last Name

  • Email

  • Time Zone

  • Title

  • Department

    • Business Phone

  • Mobile Phone


    • none
    • Read its own user record (details).
    • Read its own Role, Permissions, and Member of Groups (group membership),
      but cannot read any Group record.
    • Update specific fields in its own details (see Fields).

    • First Name

    • Middle Name

    • Last Name

    • Email

    • Time Zone

    • Title

    • Department

    • Business Phone

    • Mobile Phone


    The following User Details is for an existing user. See the field descriptions, below, for a description of all fields that display in the User Details.


     Image RemovedImage Added

    Anchor
    User Details Field Descriptions
    User Details Field Descriptions
    User Details Field Descriptions

    ...

    Business PhoneMobile PhoneWeb Browser

    .

    ActiveIf enabled, the user ID is active and the user can log in. If disabled, the user is deactivated; the user will not appear in user lists and cannot be used for access to the Controller.

    Field Name

    Description

    Details

    This section contains detailed information about the user.

    Anchor
    User ID
    User ID
    User ID

    Log in ID for this user.

    Anchor
    Password
    Password
    Password

    Password of this user.

    Note
    titleNote

    The hint for this field, as well as the information icon, will display any current characteristics and restrictions for Passwords as defined in Password Settings.


    Anchor
    First Name
    First Name
    First Name

    First name of this user.

    Anchor
    Middle Name
    Middle Name
    Middle Name

    Middle name of this user.

    Anchor
    Last Name
    Last Name
    Last Name

    Last name of this user.

    Anchor
    Name
    Name
    Name

    Automatically generated from the First Name and Last Name of this user.

    Anchor
    Email
    Email
    Email

    Email address of this user.

    Anchor
    Password Requires Reset
    Password Requires Reset
    Password Requires Reset

    If enabled, the user will be prompted to reset the password at next login.

    Anchor
    Locked Out
    Locked Out
    Locked Out

    If enabled, locks out the user. This field is enabled automatically if the maximum number of successive failed login attempts has been reached by the user.

    Anchor
    Login Method
    Login Method
    Login Method

    Login method(s) that the user can authenticate with. (You can use the Ctrl key to select both methods.)
     
    Options:

    • Standard
    • Single Sign-On

    Anchor
    Time Zone
    Time Zone
    Time Zone

    Time zone of this user. When this user logs in, all scheduling times will be shown in the user's time zone, unless the trigger specifies a different time zone.

    Anchor
    Title
    Title
    Title

    Business title of this user.

    Anchor
    Department
    Department
    Department

    Business department of this user.

    Anchor
    Manager
    Manager
    Manager

    Business manager of this user.

    Anchor
    Business Phone
    Business Phone
    Business Phone

    Business phone number of this user.

    Anchor
    Business PhoneBusiness Phone

    Business phone number of this user.

    Anchor
    Mobile PhoneMobile Phone

    Mobile phone number of this user.

    Anchor
    Web Browser AccessWeb Browser Access

    Anchor
    Mobile Phone
    Mobile Phone
    Mobile Phone

    Mobile phone number of this user.

    Anchor
    Web Browser Access
    Web Browser Access
    Web Browser Access

    Specifies whether or not the user can log in to the user interface.
     
    Options:

    • System Default - User restriction for logging in to the user interface is based on the current system default value of the System Default Web Browser Access Universal Controller system property.
    • Yes - User is not restricted from logging in to the user interface.
    • No - User is restricted from logging in to the user interface.

    Anchor
    Command Line Access
    Command Line Access
    Command Line Access

    Specifies whether or not the user can log in to the user interfaceUniversal Controller Command Line Interface (CLI).
     
    Options:

    • System Default - User restriction for logging in to the user interface CLI is based on the current system default value of the System Default Web Browser Command Line Access Universal Controller system property.
    • Yes - User is not restricted from logging in to the user interfaceCLI.
    • No - User is restricted from logging in to the user interfaceCLI.

    Anchor
    Command Line Web Service AccessCommand Line
    Web Service Access
    Command Line Web Service Access

    Specifies whether or not the user can log in to the Universal Controller Command Line Interface (CLI) RESTful Web Services API.
     
    Options:

    • System Default - User restriction for logging in to the CLI Universal Controller Web Services is based on the current system default value of the System Default Command Line Web Service Access Universal Controller system property.
    • Yes - User is not restricted from logging in to the CLIUniversal Controller Web Services.
    • No - User is restricted from logging in to the CLIUniversal Controller Web Services.
    Anchor
    ActiveActive
    Anchor
    Web Service AccessWeb Service Access
    Web Service Access

    Specifies whether or not the user can log in to the Universal Controller RESTful Web Services API.
     
    Options:

    • System Default - User restriction for logging in to the Universal Controller Web Services is based on the current system default value of the System Default Web Service Access Universal Controller system property.
    • Yes - User is not restricted from logging in to the Universal Controller Web Services.
    • No - User is restricted from logging in to the Universal Controller Web Services.

    Active
    Active
    Active

    If enabled, the user ID is active and the user can log in. If disabled, the user is deactivated; the user will not appear in user lists and cannot be used for access to the Controller.

    Personal Access Tokens This section contains assorted detailed information about the applications that will access the Universal Controller Web Service APIs using the personal access token. Expiration Specifies when the personal access token expires. If left unspecified, the token never expires.
    Anchor
    User Impersonation
    User Impersonation
    User Impersonation

    This section specifies the users that can be impersonated by this user on Universal Controller Web Service requests. 

    Allowed Impersonation Users

    Specifies the users that can be impersonated by this user using the X-Impersonate-User HTTP header on Web Service requests.

    User impersonation requires the ops_user_impersonate role.

    Users with the ops_admin role can impersonate any user and do not need to specify Allowed Impersonation Users. 

    Metadata

    This section contains Metadata information about this record.

    UUID

    Universally Unique Identifier of this record.

    Updated By

    Name of the user that last updated this record.

    Updated

    Date and time that this record was last updated.

    Created By

    Name of the user that created this record.

    Created

    Date and time that this record was created.

    Buttons

    This section identifies the buttons displayed above and below the User Details that let you perform various actions.

    Save

    Saves a new user record in the Controller database.

    Save & New

    Saves a new record in the Controller database and redisplays empty Details so that you can create another new record.

    Save & View

    Saves a new record in the Controller database and continues to display that record.

    New

    Displays empty (except for default values) Details for creating a new record.

    Update

    Include Page
    IL:Update button
    IL:Update button

    Delete

    Include Page
    IL:Delete button
    IL:Delete button

    Refresh

    Refreshes any dynamic data displayed in the Details.

    Close

    For pop-up view only; closes the pop-up view of this user.

    Tabs

    This section identifies the tabs across the top of the User Details that provide access to additional information about the user.

    User Roles

    Allows you to assign roles to this user.

    Member of Groups

    Allows you to assign this user to one or more groups.

    Note
    titleNote

    Universal Controller only supports a user being a member of 1,000 groups or less.


    Permissions

    Allows you to assign permissions to this user.

    ...

    If deletion of a user is allowed, the following information associated with the user record also will be deleted:

    ...

    record also will be deleted:

    • User roles.
    • User permissions.
    • Group memberships.
    • User's filters.
    • User's pinned filter preferences.
    • User's layout preferences.
    • User's navigation preferences.
    • User's reports (reports made visible only to that user).
    • User's user preferences.
    • User's dashboards.

    Anchor
    impersonation
    impersonation

    Impersonating a User

    Users with the ops_admin role, the ops_user_admin role, or the ops_user_impersonate role are able to specify an X-Impersonate-User HTTP header, in additional to their authentication header/parameter, when invoking Universal Controller Web Service APIs.

    The X-Impersonate-User HTTP header is specified as the User Id of the user to be impersonated.

    Users with the ops_admin role can impersonate any user.

    Users with only the ops_user_admin role or the ops_user_impersonate role must explicitly declare which users can be impersonated in the Allowed Impersonation Users field.