Configure User Types

User types Top level category to organize the users. Based on the User Type, users can be organized into administration groups or sub-groups. define categories of users. A hierarchy of administration groups Groups are used to organize the system users. Groups can contain users or other groups. exists for each user type.

User types enable the separation of users that have very distinct characteristics. Within user types, you can create sub-groups called Administration Groups. Administration Groups provide a way to partition users for administrative purposes. Individual users can only belong to a single administration group.

For each user type, you can define:

• User repositories relating to this user type

• Authentication policies accessible to users of this type

• User attributes for users of this type

ActivID Appliance provides a default set of user types. For each user type, there are pre-defined system users.

Collectively, these sample users have all of the required privileges to fully administer the system. You can use the base data set as provided, or modify it to meet your specific requirements.

Permissions can also be assigned to users through membership in administration groups, as an alternative to assigning permissions through roles.

The installation contains a number of predefined administrative groups, user types, and users. Each one has specific predefined attributes such as enabled User Attributes, enabled Authentication Policies An authentication policy is a template containing pre-defined parameters enforced during authentication. These are created within each authentication class in ActivID Management Console to help categorize the authenticators. (for user types), enabled Permission sets (for administrative groups), and registered authentication records and roles Roles represent the relationships users have with an organization. For example, the relationship between a direct user, such as a help desk operator, and an organization can be based on the position the direct user holds within the organization. The relationship of an indirect user, such as a customer, can be based on a commercial or legal agreement with the organization. (for users).

Create a User Type

1. Log on to the ActivID Management Console as a configuration manager.
2. Select the Access Administration tab and, under User Organization, select User Types.



All existing user types are listed in a paged table. The total number of user types is given in the lower left corner.

Each row corresponds to a user type. It provides the following information in the different columns:

• Name – the name of the user type
• Description – a brief description of the user type's purpose

Launch the User Type Creation Wizard

1. Click Add.



2. Enter the main information for the User type:

   • Name – should be unique for ease of administration.
   • Code – a value is automatically generated but it can be changed. The code must be unique, a minimum of three characters, and a maximum of 10 characters. It cannot be changed once the user type is created.
   • Description – (optional) content is free-format.
3. Proceed to Map a User Repository to a User Type.

Map a User Repository to a User Type

1. From the drop-down list, select Available, and then select the check box of the user repository that you want to map.

2. Click Add to add the user repository root nodes.

3. Enter the Root Node value and click Add.

4. Click Ok.



The user repository has been mapped to this user type.

5. Click Next and proceed to Assign an Authentication Policy to a User Type.

Assign an Authentication Policy to a User Type

By assigning an authentication policy to a user type, you select the authentication policy that is valid for users of this user type, within its administration group hierarchy. This assignment can only be performed at this level.

1. To assign an authentication policy to this user type, from the Authentication Policies list, select the check box(es) of the required authentication policy(ies).
2. Click Next and proceed to Assign User Attributes to a User Type.

Assign User Attributes to a User Type

1. To define relevant user attributes, from the User Attributes list, select the check box(es) of the required user attribute(s).
Note: This selection is applicable only for database-managed users. Attributes of users managed on an external user repository are defined as part of the user repository configuration.

2. Click Save.

Edit a User Type

1. Log on to the ActivID Management Console as a configuration manager.
2. Select the Access Administration tab and, under User Organization, select User Types.



3. Click on the name of the user type you want to edit and edit the settings as required.

All the settings can be modified except the Code.

4. Click Save to apply your changes.

If you want to cancel the operation, click Back to List.

Copy a User Type

1. Log on to the ActivID Management Console as a configuration manager.
2. Select the Access Administration tab and, under User Organization, select User Types.



3. Select the check box of the user type you want to copy and click Copy.
4. Click on the name of the copied user type and edit the settings as required.

All the settings can be modified except the Code.

5. Click Save to apply your changes.

If you want to cancel the operation, click Back to List.

Delete a User Type

1. Log on to the ActivID Management Console as a configuration manager.
2. Select the Access Administration tab and, under User Organization, select User Types.

2. Select the check box of the user type you want to delete, and click Delete.

3. When prompted, select Yes.

See also:

Users and Groups

Configure User Repositories