32.1. Users #
32.1.1. Creating a User #
In the navigation panel, go to Users.
In the top-right corner of the page, click Add user.
Specify parameters of the new user (parameters marked with an asterisk are required):
First name.
Last name.
Email.
Login: The user login for logging in to the web application.
The maximum login length is 64 characters.
Password: The password for logging in to the web application.
The minimum password length is 8 characters.
Job title.
Phone.
Personal roles: Roles that are assigned to the user.
To assign a role to a user, click Add and select the role. For certain roles, select objects to which these roles grant access.
Groups: Groups to which the user is added.
You can also add a user to a group when creating or editing the group.
PPEM access: Specifies whether the user can log in to the web application.
Possible values:
Password change is required: The user can log in to the web application. When logging in, the user must reset the password.
Active: The user can log in to the web application.
Blocked: The user is blocked from logging in to the web application.
To unblock a user, select Active from PPEM access when editing the user.
Auto-blocked: This value cannot be selected when creating a user, but it can be displayed when viewing users.
Click Add.
32.1.2. Viewing Users #
In the navigation panel, go to Users.
The table of users with the following columns will be displayed:
Login: The user login for logging in to the web application.
Full name: The first and last name of the user.
This column includes additional information:
Email.
Phone number.
This column includes additional information:
Job title.
PPEM access: Specifies whether the user can log in to the web application.
Possible values:
Active: The user can log in to the web application.
Auto-blocked: The user was automatically blocked from logging in to the web application due to too many failed log-in attempts.
For more information about automatic user blocking, refer to Section 32.1.5.
Blocked: The user is blocked from logging in to the web application.
To unblock a user, select Active from PPEM access when editing the user.
Password change is required: The user can log in to the web application. When logging in, the user must reset the password.
User type.
Personal roles: Roles that are assigned to the user.
Groups: PPEM groups, LDAP groups, and OIDC groups to which the user is added.
Actions.
For more information about available actions, refer to the corresponding instructions.
32.1.3. Editing a User #
In the navigation panel, go to Users.
Click
next to the user. Edit user parameters.
Click Save.
32.1.4. Resetting a User Password #
In the navigation panel, go to Users.
Click
next to the user. Enter and confirm the new password.
Click Update password.
32.1.5. Configuring the Automatic User Blocking #
You can specify the maximum number of failed attempts to log in to the web application, after which the user is automatically blocked from logging in again. To do this, use the jwt.max_failed_login_attempts: parameter of the maximum_number_of_failed_attemptsppem-manager.yml manager configuration file.
Note
Users blocked due to too many failed log-in attempts are not unblocked automatically.
To unblock a user, select Active from PPEM access when editing the user.
32.1.6. Deleting a User #
Important
Deleted users cannot be restored.
To delete a user:
In the navigation panel, go to Users.
Click
next to the user. Click Delete.