Administer > User and user group setup and security > Manage customer administrators and customer groups

Manage customer administrators and customer groups

One way to organize your servers and provide access control boundaries is to organize your managed servers by customer. A customer represents a set of servers associated with a business organization, such as a division or a company. Typically a server is associated with a customer because it runs applications for that customer. For more information on creating and managing customers, see the SA Use section.

You can delegate super administrator tasks to a customer administrator. A customer administrator manages the users who manage the servers assigned to a customer. A customer administrator is a super administrator with access only to certain user groups.

You create customer administrators by creating customer groups and assigning customers and users to the customer group. For more information, see Customer administrators and Customer groups.

View all customer administrators

A customer administrator is a user listed in a customer group. To view all SA customer administrators:

  1. In the SA Client, select the Administration tab in the navigation pane.
  2. Open the Users and Groups node in the navigation pane. This displays the Super Administrators node.
  3. Select the Super Administrators node. This displays all your super administrators and customer administrators. You can distinguish the two types of administrators by the icon as shown below:

Customer Administrator icon

Super Administrator icon

Creat a customer administrator from the customer group view

An SA customer administrator is an SA user who can modify certain user groups. To create an SA customer administrator, add an SA user to a customer group:

  1. Log in to the SA Client as a super administrator, such as admin.
  2. Select the Administration tab in the navigation pane.
  3. Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
  4. Select a customer group. See Create a customer group.
  5. Select the Actions > Open menu or right-click and select Open. This opens the customer group in a separate window.
  6. Select the Users view. This displays all the SA users who are members of that customer group.
  7. Select the “+” icon or the Actions > Add menu. This displays all your SA users. See Create a new user.
  8. Select one or more users that you want to make customer administrators and press Select.
  9. Select File > Save.
  10. Select File > Close.

This allows the new customer administrator to modify the user groups with resource permissions to the customer.

View all customer administrators for a customer group

A customer administrator is a user listed in a customer group. To view all SA customer administrators for a customer group:

  1. In the SA Client, select the Administration tab in the navigation pane.
  2. Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your customer groups.
  3. Select a customer group.
  4. Select the Users view. This displays all the users who are members of the customer group. These users are customer administrators for the customers listed in the customer group.

View all customers for a customer group

A customer administrator is a user listed in a customer group. To view all customers in a customer group, perform the following steps:

  1. In the SA Client, select the Administration tab in the navigation pane.
  2. Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your customer groups.
  3. Select a customer group.
  4. Select the Customers view. This displays all the customers who are members of the customer group.

Create a customer group

A customer group associates one or more users with one or more customers and makes those users customer administrators. An SA customer administrator is an SA user who can modify all the user groups that have access to that customer. To create an SA customer administrator, you must create a customer group:

  1. Log in to the SA Client as a super administrator, such as admin.
  2. Select the Administration tab in the navigation pane.
  3. Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
  4. Select the Actions > Add menu or select the New Item icon.
  5. Enter the name and a description of the customer group.
  6. Select the Customers view.
  7. Select the “+” icon or the Actions > Add menu. This displays all your customers.
  8. Select one or more customers and press Select.
  9. Select the Users view.
  10. Select the “+” icon or the Actions > Add menu. This displays all your SA users.
  11. Select one or more users that you want to add to the customer group and press Select.
  12. Select File > Save.
  13. Select File > Close.

Delete a customer group

A customer group associates one or more users with one or more customers and makes those users customer administrators. An SA customer administrator is an SA user who can modify certain user groups. To delete a customer group:

  1. Log in to the SA Client as a super administrator, such as admin.
  2. Select the Administration tab in the navigation pane.
  3. Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
  4. Select the customer group you want to delete.
  5. Select the “X” icon or the Actions > Delete menu or right-click and select Delete or press the Delete key on your keyboard. This removes the selected customer groups.

Create a customer administrator from the user view

An SA customer administrator is an SA user who can modify certain user groups. To create an SA customer administrator, add an SA user to a customer group:

  1. Log in to the SA Client as a super administrator, such as admin.
  2. Select the Administration tab in the navigation pane.
  3. Under the Users and Groups node in the navigation pane, select the Users node. This displays all your existing SA users.
  4. Select a user. See Create a new user.
  5. Select the Actions > Open menu, or right-click and select Open. This opens the user in a separate window.
  6. Select the Customer Groups view. This displays all the customer groups the user belongs to.
  7. Select the “+” icon or the Actions > Add menu. This displays all your customer groups. See Create a customer group.
  8. Select one or more customer groups, and press Select.
  9. Select File > Save.
  10. Select File > Close.

This allows the new customer administrator to modify the user groups with resource permissions to the customer.

Delete a customer administrator from the customer group view

An SA customer administrator is an SA user who can modify certain user groups. To delete an SA customer administrator, remove that SA user from the customer groups to which the user belongs. Perform the following steps:

  1. Log in to the SA Client as a super administrator, such as admin.
  2. Select the Administration tab in the navigation pane.
  3. Under the Users and Groups node in the navigation pane, select the Customer Groups node. This displays all your existing customer groups.
  4. Select a customer group.
  5. Select the Actions > Open menu, or right-click and select Open. This opens the customer group in a separate window.
  6. Select the Users view. This displays all the SA users who are members of that customer group.
  7. Select one or more users that you want to delete from the customer group, then select the “–” icon or the Actions > Remove menu, right-click and select Remove, or press the Delete key on your keyboard. This removes the selected SA users from the customer group so they are no longer customer administrators. The users are still valid SA users, however.
  8. Select File > Save.
  9. Select File > Close.

Delete a customer administrator from the user view

An SA customer administrator is an SA user who can modify certain user groups. To delete an SA customer administrator, remove that SA user from the customer groups to which the user belongs:

  1. Log in to the SA Client as a super administrator, such as admin.
  2. Select the Administration tab in the navigation pane.
  3. Under the Users and Groups node in the navigation pane, select the Users node. This displays all your existing SA users.
  4. Select a user.
  5. Select the Actions > Open menu, or right-click and select Open. This opens the user in a separate window.
  6. Select the Customer Groups view. This displays all the customer groups to which the user belongs.
  7. Select one or more customer groups from which you want to remove the user, then select the “–” icon; the Actions > Remove menu, right-click and select Remove, or press the Delete key on your keyboard. This removes the user from the customer groups.
  8. Select File > Save.
  9. Select File > Close.

Specify password character requirements

To specify character requirements for SA user passwords:

  1. Select the Administration tab in the SA Client.
  2. In the navigation pane select System Configuration > Configuration Parameters. This displays the SA components, facilities, and realms that have system configuration parameters.
  3. In the list of SA components, select Server Automation System Web Client (OCC). This displays the system configuration parameters for this component.
  4. Locate the parameter owm.features.MiniPasswordPolicy.allow, and set it to true.

    This parameter must be true for the other password parameters on this page to take effect. To disable the other password parameters, set owm.features.MiniPasswordPolicy.allow to false.

  5. Set the values for the password parameters listed in the following table.
  6. Select Revert to discard your changes, or Save to save your changes.
  7. To apply these parameter changes to other cores in a multimaster mesh, you must restart the other cores. For instructions, see SA Start/Stop script.

Password requirements on the modify configuration parameters page

Password Requirement

Parameter

Allowed Values

Default Value

Maximum number of repeating, consecutive characters

owm.pwpolicy.maxRepeats

Must be greater than 0

2

Minimum number of characters

owm.pwpolicy.minChars

Positive integer

6

Minimum number of non-alphabetic characters

owm.pwpolicy.
minNonAlphaChars

Must be less than the value of owm.pwpolicy.minChars

0