Users and Application Management - User and Session Management

User and Session Management provides tools for creating user accounts, monitoring the list of logged-in users, and closing a session when necessary. 

On the SBC main screen, go to Administration > Users and Application Management > User and Session Management. The User Management window is displayed.

Figure 1: User Management

The User Management window includes three tables that appear as separate frames:

• User Sessions
• NETCONF Sessions
• Users

The parameters (displayed as column heads) in the tables are:

Create a User

1. On the SBC main screen, navigate to Administration > User and Application Management > User and Session Management.

2. Click New User on the Users section of the User Management window. The Create User window appears:

3. In User, enter a username for the new user you are creating. 

   The following user-naming rules apply:

   • Usernames can begin with A-Z a-z _ only.
   • Usernames cannot start with a period, dash, or digit.
   • Usernames can contain a period(.), dash(-), alphabetic characters, digits, or underscore(_).
   • Usernames cannot consist of digits only.

   • Usernames can contain a maximum of 23 characters.

   The following names are not allowed:

   tty disk kmem dialout fax voice cdrom floppy tape sudo audio dip src utmp video sasl plugdev staff users nogroup i2c dba operator

4. In Role, select the type of role to assign to this user.  For descriptions of the roles, refer to Managing SBC Core Users and Accounts. 

   The role options are:

   1. • Administrator
      • Calea
      • FieldService
      • Guest
      • Operator
      • SecurityAuditor 
5. Specify the following options for the new user account:
   
   1. • Allow Interactive Access (CLI and EMA): Enable this flag to allow the user to access interactive interfaces such as CLI/EMA.
      • Allow Machine to Machine Access (REST): Enable this flag to allow the specified user machine-to-machine access to RESTCONF API. By default, this is Enabled.
      • Account Expiration Enabled: If checked, the current user account expires as per the account expiration parameters set in the Application Management window. For more information, refer to Users and Application Management - Application Management. An account can expire in either of the following conditions:
        • Number of failed log in attempts, set in the Application Management window. 
        • Number of days the account is unused, set in the Application Management window. 
      • Password Expiration Enabled: If checked, the current account's password will expire after a duration specified in the Application Management window. For more information, refer to Users and Application Management - Application Management.
      • Account Enabled: If checked, the account will be enabled immediately.
      • Access Type: Specifies the type of access that should be given to this user. The options are:
        • Public Key Only (CAC Card): The user can login only with U.S. Department of Defense's Common Access Card (CAC) for authentication.
        • Password and Public Key: The user can login with the provided password along with the U.S. Department of Defense's Common Access Card (CAC) for authentication.

6. Click Save.
   
   

Edit Users

The access permission, role, and account-related information can be modified for an existing user.

1. In the Users section of the User Management screen, click the button adjacent to the account you want to edit. The Edit User window appears.

2. You cannot edit the name of the user, but you can modify the following settings. See the Create a User procedure on this page for descriptions of the options.

   • Role
   • Allow Interactive Access (CLI and EMA)
   • Allow Machine to Machine Access (REST)
   • Account Expiration Enabled
   • Password Expiration Enabled
   • Account Enabled

   • Access Type

3. Click Save to save your edits.

Reset Password

The Administrator can reset the password for any user. 

1. In the Users list, click the button adjacent to the account for which you would like to reset the password. The Edit User window appears.

2. Click Reset Password. A temporary password is created for that user.......

3. You can optionally click the email icon (envelope) at the bottom right of the window to email the temporary password to yourself.

Refer to System - Admin - Password Rules for details on setting passwords.