Managing Framework Users And Groups; Managing Users; Configuring Account Settings; Chapter 4, "Managing Framework Users And Groups - Novell PRIVILEGED USER MANAGER 2.2.1 - ADMINISTRATION GUIDE 03-31-2010 Administration Manual

Managing Framework Users and
4
Groups
Privileged User Manager provides comprehensive user management facilities to control access to
the Framework consoles. The admin user created when the Framework is initially installed belongs
to the admin group, which has full access to all installed consoles and can perform all tasks. You can
use this user account to create additional user accounts and groups through the Framework User
Manager console, which is part of the Access Control module. Role-based authorization is used to
determine which user groups can access specific consoles and perform specific tasks.
This section describes the following Framework User Manager tasks:
Section 4.1, "Managing Users," on page 45
Section 4.2, "Managing Groups," on page 54
Section 4.3, "Deploying the Access Control Module," on page 60
Section 4.4, "Changing a Framework User's Password," on page 61

4.1 Managing Users

When you add a new user, the user cannot access any of the Framework consoles until the user is
added to a group that contains a role allowing the appropriate access. For example, if you want a
user to be able to access only the Compliance Auditor console, you must create a group and
configure the appropriate Compliance Auditor roles, then create the user and add the user to the
group.
You can create additional users with the same access as the admin user by adding them to the admin
group, or create your own group with access to all modules and roles. You can also configure these
additional users to be superusers. Only users who belong to a group with the "super" role can view
and administer superusers.
Section 4.1.1, "Configuring Account Settings," on page 45
Section 4.1.2, "Adding a Framework User," on page 47
Section 4.1.3, "Modifying a Framework User," on page 47
Section 4.1.4, "Removing a Framework User Group from a User," on page 54
Section 4.1.5, "Deleting a Framework User," on page 54

4.1.1 Configuring Account Settings

The Account Settings option allows you to set the default values for user settings such as minimum
password length. When you add a new user, these default settings apply, but they can be overridden
for individual users by modifying the individual account settings.
1 Click Framework User Manager on the home page of the console.
2 Click Users in the navigation pane.
3 Click Account Settings in the task pane.

Managing Framework Users and Groups

4
45