Users Tab in User Management

Purpose

In this tab, you manage the users and their rules for logging-in to models or logging-in to model servers as a repository administrator.

Primarily, this tab offers an overview of the users, their rules and group assignments.

Use user groups for assigning general rules. You can define user-specific rules if necessary here.

You can also create users manually, change user data and delete users. You cannot change the details of users that are synchronized with external user configurations.

User's can be assigned the right to manage users in the license server.

Prerequisites

In order to call the central user management on the main license server in the administration program and use its functions, you must be logged-in to the license server as an administrator or your user must have the Manage Users right (normally as a group member).

Call

In the User Management in the tab tree, select the User tab.

Structure

This tab consists of two areas: On the left is the table of users and on the right are the rules and group assignments of a selected user.

The user name (or, if this is not available, the system name) of a selected user is displayed in the status bar.

A filter field is available in the Users table.

Users Table

Displays the properties of the users and enables the filtering of the table.

Table Columns

External

Displays whether the entry was locally created and can be modified or comes from an external user management and cannot be changed.
System Login

Name of the user in the system (Windows user name); is used together with the domain.
Domain

Required on Windows to determine the user name along with the system login and to authenticate the user.
User Name in Model

Display name assigned which is used for logging-in users into models if the Single Sign-On property is activated for the repository and the entry in the System Login column corresponds to the system login. If no name is given, then the system login is used.
E-Mail Address

Shows the user's e-mail address.
Manage Users

The column shows whether the user can manage users in the license server.

This right also includes the right to assign this right.
Login Rules

Indicates whether the user has login rules.
Model Administrator Rules

Indicates whether the group has any model administrator rules for its members.
Model Server Rules

Indicates whether the user has model server rules.
Version Rules

Indicates whether the user has version rules.
Groups

Indicates whether the user is assigned to groups.

User Details

User Display Field

Indicates the name of the selected user.

Login Rules and Model Server Rules Tables

The tables display the rules of the selected user.

The direct user rules are always listed before the inherited group rules and their order can be changed.

Inherited rules cannot be moved. You cannot change the order of the groups.

When a user logs-in, the first applicable rule for that user is applied.

Table Columns

Access

Access sets whether the rule allows or denies access to the given models.
Role (only for login rules)

A role's name or pattern can be selected from the list of roles or directly entered. The list of roles comes from the entries in Roles tab.
Project

A project license server's name or pattern can be selected from the list or entered directly. It is identified using Name.Port. The list of project license servers comes from project license servers which are currently running and available.
Repository (only for standalone models)

A repository's name or pattern can be selected from the list of repositories or entered directly. The list of repositories comes from model servers which are currently running and available on the project license servers set in the Project column.
Model (only for login rules)

The name or pattern for identifying the model for the rule.
Version (only for managed models)

The name or pattern for identifying the version name for the rule.
API (only for model administrator rules)

Shows whether the rules only apply for plug-ins.
inherits

Shows the name of the groups that rules were inherited from. Inherited rules can only be modified in groups they originated from.
reachable

Shows whether the rule cannot be reached, i.e. if it is ineffective:
- Cannot be reached by other rules
  
  The icon's tool tip shows "Rule is not reachable.".
- Project does not exist
  
  The icon's tool tip shows "Project does not exist.".

"Assigned to Groups" Table

The table displays the groups to which the selected user is assigned.