Jump to contentJump to page navigation: previous page [access key p]/next page [access key n]

16 Users

Only SUSE Manager administrators can see Main Menu › Users. With Users you can grant and edit permissions for those who administer your system groups. Click a user name in the Main Menu › Users › User List › Active to modify the user.

To add new users to your organization, click the Create User link on the top right corner of the page. On the Create User page, fill in the required values for the new user.

Once all fields are completed, click the Create Login button. SUSE Manager now sends an e-mail to the specified address and takes you back to the Main Menu › Users › User List › Active page. If you want to set permissions and options for the new user, click the name in the list. The User Details page for this user provides several tabs of options.

Refer to Section 16.1.4, “User Details for detailed descriptions of each tab.

16.1 User List

The User List provides three views:

  • Active user list

  • Deactivated user list

  • List all users

16.1.1 Main Menu › Users › User List › Active

The active user list shows all active users on your SUSE Manager and displays basic information about each user: user name, real name, roles, and date of their last sign in.

The active user list shows all active users on your SUSE Manager and displays basic information about each user: user name, real name, roles, and date of their last sign in.

Each row in the User List represents a user within your organization. There are four columns of information for each user:

  • Username — The login name of the user. Clicking a user name displays the User Details page for the user. Refer to Section 16.1.4, “User Details for more information.

  • Real Name — The full name of the user (last name, first name).

  • Roles — List of the user’s privileges, such as organization administrator, channel administrator and normal user. Users can have multiple roles.

  • Last Sign In — Shows when the user last logged in to SUSE Manager.

users user list

16.1.2 Main Menu › Users › User List › Deactivated

The deactivated user list shows all deactivated users. You may also reactivate any user listed here.

users deactivated user list

Click the check box to the left of their name and click the Reactivate button then the Confirm button. Reactivated users retain the permissions and system group associations they had when they were deactivated. Clicking a user name shows the User Details page.

16.1.3 Main Menu › Users › User List › All

The All page lists all users that belong to your organization.

The All page lists all users that belong to your organization.

users all users

In addition to the fields listed in the previous two screens, the table of users includes a Status field. This field indicates whether the user is Active or Deactivated. Click a user name to see the User Details page.

16.1.4 User Details

Clicking a user name on a Main Menu › Users › User List listing displays the User Details page.

users user list

Here SUSE Manager administrators manage the permissions and activity of all the users. Here you can also delete or deactivate users.

Users can be deactivated directly in the SUSE Manager Web interface. SUSE Manager administrators can deactivate or delete users of their organization. Users can deactivate their own accounts.

Note
Note: Users with SUSE Manager Administrator Role

Users with the SUSE Manager administrator role cannot be deactivated until that role is removed from their account.

Deactivated users cannot log in to the SUSE Manager Web UI or schedule any actions. Actions scheduled by a user prior to their deactivation remain in the action queue. Deactivated users can be reactivated by SUSE Manager administrators.

Warning
Warning: Irreversible Deletion

User deletion is irreversible; exercise it with caution. Consider deactivating the user first to assess the effect deletion will have on your infrastructure.

To deactivate a user:

  1. Click a user name to navigate to the User Details tab.

  2. Verify that the user is not a SUSE Manager administrator. If they are, uncheck the box to the left of that role and click the Submit button.

  3. Click the Deactivate User link in the upper right corner of the dialog.

  4. Click the Deactivate User button to confirm.

To delete a user:

  1. Click a user name to navigate to the User Details tab.

  2. Verify that the user is not a SUSE Manager administrator. Uncheck the box to remove the role if necessary.

  3. Click the Delete User link in the upper right corner of the dialog.

  4. Click the Delete User button to permanently delete the user.

For instructions to deactivate your own account, refer to Section 6.7.4, “Account Deactivation”.

16.1.4.1 User Details › Details

The Details tab, displays the user name, first name, last name, e-mail address, roles of a user, and other details about the user. The Details tab, displays the user name, first name, last name, e-mail address, roles of a user, and other details about the user.

users user details

Edit this information as needed and then confirm with Update. When changing a user’s password, you will only see asterisks as you type.

To delegate responsibilities within your organization, SUSE Manager provides several roles with varying degrees of access. This list describes the permissions of each role and the differences between them:

  • [guimenu]``User (normal user) — Also known as a System Group User, this is the standard role associated with any newly created user. This person may be granted access to manage system groups and software channels, if the SUSE Manager administrator sets the roles accordingly. The systems must be in system groups for which the user has permissions to manage them. However, all globally subscribable channels may be used by anyone.

  • SUSE Manager Administrator — This role allows a user to perform any function available in SUSE Manager.

As the master account for your organization, the person holding this role can alter the privileges of all other accounts of this organization, and conduct any of the tasks available to the other roles. Like with other roles, multiple SUSE Manager administrators may exist. Go to Main Menu › Admin › Users and click the check box in the SUSE Manager Admin row. For more information, see Section 17.3, “Main Menu › Admin › Users.

+ A SUSE Manager Administrator can create foreign organizations; but a SUSE Manager Administrator can only create users for an organization if he is entitled with organization administrator privileges for this organization. * Organization Administrator — This role provides a user with all the permissions other administrators have, namely the activation key, configuration, channel, and system group administrator. A Organization Administrator is not entitled to perform actions that belong to the Main Menu › Admin features (see Chapter 17, Admin). * Activation Key Administrator — This role is designed to manage your collection of activation keys. A user assigned to this role can modify and delete any key within your organization. * Image Administrator — This role is designed to manage Image building. Modifiable content includes Image Profiles, Image Builds and Image Stores. A user assigned with this role can modify and delete all content located under the Main Menu › Images. These changes will be applied across the organization. * Configuration Administrator — This role enables a user to manage the configuration of systems within the organization, using either the SUSE Manager Web UI or tool from the rhncfg-management package. * Channel Administrator — This role provides a user with full access to all software channels within your organization. This requires the SUSE Manager synchronization tool (mgr-sync from the susemanager-tools package). The channel administrator may change the base channels of systems, make channels globally subscribable, and create entirely new channels. * System Group Administrator — This role limits authority to systems or system groups to which access is granted. The System Group Administrator can create new system groups, delete any assigned systems from groups, add systems to groups, and manage user access to groups.

Being a SUSE Manager administrator enables you to remove administrator rights from other users. It is possible to remove your own privileges as long as you are not the only SUSE Manager administrator.

To assign a new role to a user, check the respective box. SUSE Manager administrators are automatically granted administration access to all other roles, signified by grayed-out check boxes. Click Update to submit your changes.

16.1.4.2 User Details › System Groups

This tab displays a list of system groups the user may administer; for more information about system groups, see Section 7.4, “Systems > System Groups”.

users details system groups

SUSE Manager administrators can set this user’s access permissions to each system group. Check or uncheck the box to the left of the system group and click the Update Permissions button to save the changes.

SUSE Manager administrators may select one or more default system groups for a user. When the user registers a system, it gets assigned to the selected group or groups. This allows the user to access the newly-registered system immediately. System groups to which this user has access are preceded by an (*).

16.1.4.3 User Details › Systems

This tab lists all systems a user can access according to the system groups assigned to the user.

users details systems

To carry out tasks on some of these systems, select the set of systems by checking the boxes to the left and click the Update List button. Use the System Set Manager page to execute actions on those systems. Clicking the name of a system takes you to its System Details page. Refer to Section 7.3, “System Details”.

16.1.4.4 User Details › Channel Permissions

This tab lists all channels available to your organization.

users details channel permissions

Grant explicit channel subscription permission to a user for each of the channels listed by checking the box to the left of the channel, then click the Update Permissions button. Permissions granted by a SUSE Manager administrator or channel administrator have no check box but a check icon like globally subscribable channels.

16.1.4.4.1 User Details › Channel Permissions › Subscription

Identifies channels to which the user may subscribe systems.

To change these, select or deselect the appropriate check boxes and click the Update Permissions button. Note that channels subscribable because of the user’s administrator status or the channel’s global settings cannot be altered. They are identified with a check icon.

16.1.4.4.2 User Details › Channel Permissions › Management

Identifies channels the user may manage. To change these, select or deselect the appropriate check boxes and click the Update Permissions button. The permission to manage channels does not enable the user to create new channels. Note that channels automatically manageable through the user’s admin status cannot be altered. These channels are identified with a check icon. Remember, SUSE Manager administrators and channel administrators can subscribe to or manage any channel.

16.1.4.5 User Details › Preferences

Configure the following preference settings for a user.

users details preferences
  • Email Notifications : Determine whether this user should receive e-mail every time a patch alert is applicable to one or more systems in his or her SUSE Manager account, and daily summaries of system events.

  • SUSE Manager List Page Size : Maximum number of items that appear in a list on a single page. If the list contains more items than can be displayed on one page, click the Next button to see the next page. This preference applies to the user’s view of system lists, patch lists, package lists, and so on.

  • Overview Start Page : Configure which information to be displayed on the Overview page at login.

  • Time Zone : Select the time zone from the drop-down box. Dates and times, like system check-in times, will be displayed according to the selected time zone.

  • CSV Files : Select whether to use the default comma or a semicolon as separator in downloadable CSV files.

Change these options to fit your needs, then click the Save Preferences button.

16.1.4.6 User Details › Addresses

This tab lists mailing addresses associated with the user’s account.

users details addresses

If there is no address specified yet, click Fill in this address and fill out the form. When finished, click Update. To modify this information, click the Edit this address button, change the relevant information, and click the Update button.

16.2 System Group Configuration

System Groups help when diferrent users shall administer different groups of systems within one organization.

16.2.1 Main Menu › Users › System Group Configuration › Configuration

Enable Create a user default System Group and confirm with Update.

Assign such a group to systems via the System Details › Groups › Join subtab. For more information, see Section 7.3.5.2, “System Details › Groups › Join.

users system group config

16.2.2 Main Menu › Users › System Group Configuration › External Authentication

Allows to create an external group with the Create External Group link.

Users can join such groups via the System Groups of the user details page, then check the wanted Group, and confirm with Update Permissions.

users system group config external auth

For more information, see Section 16.1.4.2, “User Details › System Groups.

Print this page