Manage user details

You can manage the users added directly in Access Manager or those imported from an external provider. For users synchronized from the LDAP/AD, the changes related to user information and credentials do not apply because this information is read-only.

Prerequisites

• You have a user added in Access Manager.

Procedure

1. On the left sidebar, click Users.

2. Find the needed user using the search field or click View all users to view the whole list.

3. Display the user details by clicking the link in the ID column for the corresponding record.

   The page with user details opens.

   

4. (Optional) If you want to log in as this user, click Impersonate. If this user is in the same realm as you, your current session will be ended.

5. Save your changes.

6. Go to the following tabs as needed:

   Attributes

   View and manage various user attributes.

   

   If you use multitenancy, the “tenant.id” attribute is used.

   For the IBM Cognos users, you can verify that the respective credentials exist in Access Manager for Single Sign-On capability. IBM Cognos credentials are encrypted and read-only.

   Credentials

   Enter user credentials, specify whether the password is a temporary one (must be changed on the subsequent logging in), and reset credentials.

   Note: These settings apply to the users created in Access Manager.

   

   The Credentials Reset section is available if a user has an email specified in user details. You can select the reset actions, specify when the time for credentials reset expires, and then send the email with the embedded link to perform reset actions by clicking the Send email button.

   Role Mappings

   View the roles of the user (available, assigned, and effective) and assign roles to the selected user.

   To assign a role to the user, select a role in the Available Roles section, and then click Add. The role is moved to the Assigned Roles section. In the Effective Roles section, all role mappings are displayed. If any of the roles added to the Assigned Roles section has an additional role associated with it, that role will be displayed in the Effective Roles section. For details, see Permissions in default roles (the Composite Roles section).

   Note: The offline-access role is added by default (needed for screenshots and public URLs). The uma_authorization role is also added automatically to each new user (for authentication purposes).

   

   Groups

   View the available groups and groups assigned (mapped) to the user, and manage user memberships.

   To add the user to a group, select a group in the Available Groups section, and then click Add. The group appears in the Group Membership section. The user in now a member of the added group.

   

   To view memberships, go to the Groups pane, open a group (double-click it), and click the Members tab.

   Sessions

   View the user sessions, and log the user out of the current sessions.

   See also Monitor user sessions.

   Identity Providers Links

   Manage identity provider links for the user (select identity provider, specify the user ID and username).