Manage users

This section describes how to manage users with the SA Client. To manage users, you must log in to the SA Client as a super administrator (admin) and select the Administration tab, as shown in the following figure.

Users listed under the Administration tab

• Create a new user
• Change user permissions
• Change the user password
• Change your own password and properties
• Changing a user
• Assigning a user to a user group
• Find the user group a particular action permission comes from
• Suspende a user
• Activate a suspended user
• Import users from an LDAP Directory
• Delete a user

Create a new user

To create a new SA user from the SA Client:

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your SA users.
4. Select the Actions > New menu or select the New User icon. This displays the New User window.
5. Enter the first name, last name, and full name of the user.
6. To allow the new user to administer users and user groups, select the check box labeled Super Administrator. For more information, see Super administrators and Super users.
7. Enter the contact information for the new user. An email address is required.
8. Enter the log-in information for the new user.
   • The user credentials can be stored in HPE SA or on an RSA SecurID server connected to SA. You can change the user password in the SA Client only if the credential store is HPE SA.
   • The SA user name must be made up of letters, numbers, periods, hyphens, and underscores. SA user names are not case sensitive.
   • The password must be at least six ASCII characters long and may not include the “\” or “^” characters.
9. Enter the locale, time zone, and date format preferences.
10. Select the User Groups view to assign the user to one or more user groups. Assigning the user to user groups grants the corresponding permissions to the user. Use the “+” button to add the user to a user group. Use the “-” button to remove the user from the selected user group.
11. Select File > Revert to discard your changes.
12. Select File > Save to save the new user.

Change user permissions

All permissions are contained in user groups. Each user’s permissions are determined by the user groups to which they belong. To modify user permissions, you must modify the permissions defined in the user groups to which the user belongs or change the user groups to which the user belongs. For more information, see Assigning a user to a user group and Set permissions on user groups .

Change the user password

Only a super administrator (admin) can change the passwords of other SA users. If the user name has been imported from an external LDAP directory, then the password cannot be changed with the SA Client. For more information, see Authenticate with an external LDAP directory service.

To change a user’s password, you need to open the user in a user window and select the Properties view. Perform the following steps:

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your SA users.
4. Select the user you want to modify.
5. Select the Actions menu, or right-click and select Open. This displays the user information in a new window.
6. Select the Properties view. This displays the user’s login information, including a Change Password link.
7. Select the Change Password link. This displays the Change Password dialog.
8. Enter the new password. Note that when you modify the user’s password, the change takes effect immediately.
9. Select OK. This modifies the user’s password.

Change your own password and properties

Any user can change their own password and their profile information.

Users changing their own password

1. From the SA Client screen, select the “Logged in as” link in the upper right corner, as shown in the previous figure. This displays the user properties window, as shown in the following figure.

User properties window and change password link

2. To change password, select the Change Password link. Note that when modifying a password, the change takes effect immediately.
3. Change other properties as needed.
4. If any properties were changed, select File > Save.
5. Select File> Close.

Changing a user

To modify an SA user from the SA Client:

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your SA users.
4. Select the user you want to modify.
5. Select the Actions menu, or right-click and select Open. This displays the user information in a new window.
6. Optionally modify any of the user’s properties. The Properties view lists the user’s name, contact information, login information, where their credentials are stored, their user name, a link to change their password, and their date and time settings. Note that when you modify the user’s password, the change takes effect immediately.
7. Optionally add or remove the user from a user group. The User Groups view lists the user groups to which the user belongs. Each user group grants a set of permissions to all the users who belong to the group.
8. The permissions are viewable but not modifiable from the user window. To modify permissions, you need to modify user groups as described in Set permissions on user groups .
9. Select File > Revert to discard your changes.
10. Select File > Save to save the changes.

Assigning a user to a user group

Assign each SA user to a group reflecting the user’s role in your organization. To assign an SA user to a user group:

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your SA users.
4. Select the user you want to assign.
5. Select the Actions menu or right-click and select Open. This displays the user information in a new screen.
6. Select the User Groups view. This displays the user groups that the user is a member of.
7. Select the “+” button or select the Actions> Add menu. This displays all the user groups.
8. Select one or more user groups.
9. Select the Select button. This adds the user to the user groups.
10. Select File > Revert to discard your changes.
11. Select File > Save.

Find the user group a particular action permission comes from

If a user belongs to more than one user group, you can determine which user group grants a particular action permission as follows.

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your SA users.
4. Select the user you want to view.
5. Select the Actions menu, or right-click and select Open. This displays the user information in a new window.
6. Select the Action Permissions view. This displays all the action permissions organized by the user groups to which the user belongs.
7. You can also right-click on any column header and ungroup the User Group column, then use the column selector at the far right of the column headers to display the User Group column. This will show each permission followed by the user group that grants that permission.

Suspende a user

A suspended user cannot log in to SA, but the user name has not been deleted. A suspended user is indicated by a status of Suspended in the SA Client. A user can be suspended in the following ways:

• Login Failure: If you select the check box labeled Login Failure on the Security Settings tab, and someone tries to log in with the wrong password a specified number of times, the user account is suspended. For instructions on accessing the Security Settings tab, see the first two steps of Resetting initial passwords.
• Account Inactivity: If you select the check box labeled Account Inactivity on the Security Settings tab, and the user has not logged on for the specified number of days, the user account is suspended.
• Expired Password: A user can be suspended if the password has expired and the expiration count is full.
• Suspend: You can suspend a user’s account as described below. If the user is logged in, a message will be displayed and they will be logged out.

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your users.
4. Select the user you want to suspend.
5. Select the button or select Actions > Suspend.

Activate a suspended user

To activate a suspended user, perform the following steps:

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your users.
4. Select the suspended user you want to activate.
5. Select the button or select Actions > Activate.

Import users from an LDAP Directory

You can import user information from an LDAP directory and use the LDAP directory for authentication when logging into SA. For more information, see Authenticate with an external LDAP directory service.

Delete a user

To delete an SA user from the SA Client, perform the following steps:

1. In the SA Client, select the Administration tab in the navigation pane.
2. Open the Users and Groups node in the navigation pane. This displays the Users node.
3. Select the Users node. This displays all your SA users.
4. Select one or more users you want to delete.
5. Select the Actions > Delete menu, or select the delete icon.