10.2 Adding console users

In order to add or modify console users, log into the Central console (nph-psa.exe) as the superuser, or as a console user with rights to manage other users.

A console user can only manage users who have identical or lesser rights assigned to them, and cannot manage their own console user ID.

To add console users for ID-Synch:

1. Log in and navigate to the Specify console user search criteria or Console Users page.

2. Click Add.

   ID-Synch displays a form to enter console user information.

3. Type a unique identifier for the new user in the ID field.

   Console user IDs are case-sensitive.

4. Type the console user's full name.

5. Type the user's password in the Password and Confirm password fields.

6. Select the appropriate rights (see List:Console user rights) for the console user.

7. Click Add at the bottom of the form.

List 10.2- 2   : Console user rights

All rights?

Apply all rights to the console user. By default, the superuser is created with all rights.

Manage console users?

The console user can create and manage other console users.

A console user may only manage or create new console users with equal or lesser rights assigned to them.

Configure workflow setup?

The console user can configure workflow (authorizers, templates, roles, etc.). If the console user does not have this right, they cannot access the Workflow button on the Central console main menu.

Manage targets?

The console user can manage target systems. If a console user does not have this right, they cannot access the Targets button on the Central console main menu.

Configure web modules?

The console user can modify web modules configuration. If a console user does not have this right, they cannot access the Web modules button on the Central console main menu.

Administer security?

The console user can manage users and access to ID-Synch. Selecting this right implicitly selects the right to manage console users. If a console user does not have this right (or Manage console users), they cannot access the Security button on the Central console main menu.

Maintain this server?

The console user can run reports, manage services, schedule jobs, and configure nightly updates. If a console user does not have this right, they cannot access the Maintenance button on the Central console main menu.

Create accounts?

The console user can create accounts. If a console user does not have this right, they cannot access the New user or Add accounts button in the Account management console (nph-ida.exe).

Delete accounts?

The console user can delete accounts. If a console user does not have this right, they cannot access the Delete button in the Account management console (nph-ida.exe).

Enable accounts?

The console user can enable accounts. If a console user does not have this right, they cannot access the Enable button in the Account management console (nph-ida.exe).

Disable accounts?

The console user can disable accounts. If a console user does not have this right, they cannot access the Disable button in the Account management console (nph-ida.exe).

Move accounts?

The console user can move accounts between directories on target systems that have contexts. If a console user does not have this right, they cannot access the Move button in the Account management console (nph-ida.exe).

Update accounts?

The console user can update accounts. If a console user does not have this right, they cannot access the Update button in the Account management console (nph-ida.exe).

Manage groups?

The console user can manage users' account groups on target systems. If a console user does not have this right, they cannot access the Manage groups button in the Account management console (nph-ida.exe).

10.2.1 Enabling and disabling console users

Disable console users to temporarily revoke their access to ID-Synch. Console users can be disabled automatically after too many failed log in attempts, or explicitly by another console user.

To explicitly disable a console user:

1. Access the Console Users page.
2. Click the Disable button corresponding to the console user you want to disable.
   The button text changes to Enable

To enable a console user:

1. Access the Console Users page.
2. Click the Enable button corresponding to the console user you want to disable.
   The button text changes to Disable