Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Panel
bgColor#FFFAE6

This page describes how administrators can control user access to the platform.
For details of how administrators can control user access within the platform, see Manage Roles and Manage scopes

For details of how manage users, see Manage users for tenant admin or Manage users

...

Manage users with SSO or directory systems

You can use SAML, Active Directory, LDAP, and OpenID to manage users for Abiquo.

...

For details of how to configure these systems, see Configure authentication and authorization.

...

Suspend or enable a user account

Insert excerpt
Manage users for tenant admin
Manage users for tenant admin
nameSuspend or enable a user account
nopaneltrue

...

Manually reset a user password

Insert excerpt
Manage users for tenant admin
Manage users for tenant admin
nameManually reset a user password
nopaneltrue

...

Put a user on the notifications list

An enterprise manager user will receive notification emails from the cloud administrators about physical machines and their enterprise's VMs on the platform.

...

  1. Assign the user a role with the "Define enterprise manager privilege". See Manage Roles. You can edit the user's existing role or assign a new role with this privilege.

...

Restrict user access to the platform by networks

By default, users can access the platform from any network address. To restrict access, when the administrator creates or edits a user, they can allow a set of network addresses.

...

Screenshot: Create a role with Allowed CIDRs

...

...

Disable access to users view

To prevent administrators from accessing Users view:

...

The platform will not display the button, and you cannot edit users until a cloud administrator changes this option.

...

Stop users from editing their account details

By default, users can edit their own account details by going to Main menu → User icon menu → Edit user.

...

  1. Go to Configuration → Security 

  2. Deselect the option to Allow user to change their password

...

Configure access to enterprises

To display the Enterprises list on the left side of Users view, your user role must have the privilege to Manage users of all enterprises. The user can select an enterprise to edit its users. By default, only the Cloud administrator role has this privilege.

...