OpenManage Enterprise 4.0.x User's Guide

Add or edit local users

Create and edit properties of local users based on the role assigned to a user.

1. Select Application Settings > Users > Users > Add.
2. In the Add New User dialog box:
   1. Under User Details, select Administrator, Device Manager, or Viewer from the User Role drop-down menu.
      For more information, see Role and scope-based access.

      By default, the user is enabled to indicate that the user privileges set up are enabled for a user.

   2. For the Device Manager roles, the scope is defaulted to All Devices (unrestricted scope), however, the administrator can restrict the scope by choosing the Select Groups option followed by selecting the device group(s).
   3. Under User Credentials, enter Username, Password, and reenter the password in the Confirm Password fields.
      The username must contain only alphanumeric characters (but underscore is allowed) and the password must contain at least one character in: uppercase, lowercase, digit, and special character.
   4. Under RSA SecurID, select Enable or Disable to indicate whether the user account requires RSA authentication in addition to the password while logging into the appliance.
      NOTE:

      • Only Backup Administrator accounts can enable or disable multifactor authentication on themselves.
      • Every time an RSA SecurID enabled user logs in, the appliance reaches out to the RSA Authentication server. If a proxy is introduced, ensure that the appliance can still communicate with the RSA Authentication server to avoid service disruption.
      • User IDs on RSA are not case-sensitive. However, user IDs with the same name but different casing are considered to be different accounts on the appliance. For example, while 'test' and 'TEST' are considered the same account on RSA, they will be treated as two different accounts on OpenManage Enterprise.
      • Accounts that have RSA SecurID enabled will not be able to initiate any REST API calls to the appliance or any plugins outside the appliance. Authenticated REST API calls from third-party tools are also restricted. If external REST API calls to the appliance or plugins are required, allocate a user with RSA SecurID disabled.
3. Click Finish.