1- GUI Users
Users are managed under Settings -> Accounts and Views -> Users. The page has two tabs: GUI Users (accounts that log in to the web interface) and System Users (operating system accounts used on the command line, see section 2).
Only a Super Admin can create, delete, enable or disable users. Admin and User accounts can see the list, but the + User button, the Actions menu and the Delete button are not shown to them.
1.1- Create User
Open Settings -> Accounts and Views -> Users, stay on the GUI Users tab and click the + User button on the top right corner. The Add User window opens.
a. Username: a username can only be used once and cannot be changed later. Only letters, numbers and the characters _, . and - are accepted.
b. Password and Password Verify: the password must be at least 8 characters long and contain at least one upper case letter, one lower case letter and one number. If a password policy is defined under Settings -> System -> Security, the server also checks the password against that policy. Don't share your password with anyone.
c. Alias: the display name of the user. This field is required.
d. Email: e-mail address of the user (can be used as a notification option of alert rules in later sections). This field is required.
e. GSM: mobile phone number of the user (can be used as an SMS notification option of alert rules in later sections). Only digits, spaces and + are accepted. This field is required.
f. User Type: you can set the account as User, Admin or Super Admin.
g. Roles: this field appears only when the user type is User, and a role must be selected. Admin and Super Admin accounts do not take a role.
Note That: In order to define a user role, the "Roles" document in the link below should be examined.
Defining a Role for Authorization
h. Custom Expire Limits: when enabled, you can set a user specific Session Timeout (min) (default 1440) and Idle Timeout (min) (default 60).
On installations with the MSS license, the Is Analyst, Max Incident Count and Check In fields are also shown. They are not available for Super Admin accounts.
i. Click the Save button. The Verify Your Password window opens; enter the password of the account you are logged in with and click Send to complete the user creation process.
1.2- Edit User
In this section, you can edit the information of existing users.
Click the Edit button next to the user to open the Edit User window.
What you can change depends on your own account type. A Super Admin can change the password, alias, e-mail address, GSM number, user type, role and custom expire limits of any user. An Admin sees the Edit button for Admin and User accounts (not for Super Admin accounts), can change the role of a User account and can update their own alias, e-mail address and GSM number; the password and user type fields are only available to a Super Admin. The username cannot be changed, and fields that come from LDAP cannot be edited for LDAP users.
Every change is confirmed in the Verify Your Password window with the password of the account you are logged in with. If the user account is locked because of failed login attempts, an Unlock button is shown at the top of the Edit User window.
A Super Admin can also select one or more users in the list and use the Actions menu to Enable 2FA, Disable 2FA, Reset 2FA, Disable User or Enable User. A single user can be disabled or enabled with the Disable / Enable button in its row.
1.3- Delete User
To delete a user, click the Delete button in its row. The Confirm window asks "Are you sure you want to delete this item?". Click Delete, then enter your own password in the Verify Your Password window and click Send. Only a Super Admin can delete users, and you cannot delete the account you are logged in with.
2- System Users
System users are operating system (CLI) accounts on the Logsign server. They are listed on the System Users tab of the Settings -> Accounts and Views -> Users page, and only a Super Admin can add, edit or delete them.
Logsign has a system user named iadmin by default. It is shown in the list as iadmin (Default System User) and cannot be deleted. With this user you can access the Logsign server from the command line and perform the operations you need.
You can change the password of a system user with the Edit button. In the Edit System User window, enter the Current Password of that system user, then the new Password and Password Verify.
You can create a new system user with the + System User button. The Password Policy button next to it sets the complexity rules (minimum characters, lower case, upper case, digits or symbols) applied to system user passwords.
We recommend you to choose a strong password which consists of a combination of uppercase and lowercase letters, numbers and special symbols, such as punctuation. You should avoid using common, easily hacked characters and reusing the same password across multiple accounts. The form requires at least 8 characters with at least one upper case letter, one lower case letter and one number.
After entering the username and password, click Save, then confirm with your own password in the Verify Your Password window. On a cluster, the system user is created on every server.
If you need help with the Logsign server system, please send us a ticket here. CLI use needs expertise, and a wrong command can easily break a service.