Reference Manual
- About This Guide
- 1 Available Documentation
- 2 Feedback
- 3 Documentation Conventions
- 4 Special SUSE Manager Documentation Conventions
- 5 Overview and Navigation
- 6 Navigation
- 7 Systems
- 8 Autoinstallation
- 9 Salt
- 10 Images
- 11 Patches
- 12 Software
- 13 Audit
- 14 System Security via OpenSCAP
- 15 Configuration
- 16 Schedule
- 17 Users
- 18 Admin
- 19 Help
17 Users
Only SUSE Manager administrators can see in the left navigation menu. With you can grant and edit permissions for those who administer your system groups. Click a user name in the to modify the user.
To add new users to your organization, click the link on the top right corner of the page. On the page, fill in the required values for the new user.
Once all fields are completed, click the button. SUSE Manager now sends an e-mail to the specified address and takes you back to the › › page. If you want to set permissions and options for the new user, click the name in the list. The page for this user provides several tabs of options. Refer to Section 17.1.4, “” for detailed descriptions of each tab.
17.1 #
The provides three views:
17.1.1 > #
The active user list shows all active users on your SUSE Manager and displays basic information about each user: user name, real name, roles, and date of their last sign in.
Each row in the represents a user within your organization. There are four columns of information for each user:
— The login name of the user. Clicking a user name displays the page for the user. Refer to Section 17.1.4, “” for more information.
— The full name of the user (last name, first name).
— List of the user’s privileges, such as organization administrator, channel administrator and normal user. Users can have multiple roles.
— Shows when the user last logged in to SUSE Manager .
17.1.2 > #
The deactivated user list shows all deactivated users. You may also reactivate any user listed here.
Click the check box to the left of their name and click the button then the button. Reactivated users retain the permissions and system group associations they had when they were deactivated. Clicking a user name shows the page.
17.1.3 > #
The page lists all users that belong to your organization.
In addition to the fields listed in the previous two screens, the table of users includes a field. This field indicates whether the user is or . Click a user name to see the page.
17.1.4 #
Clicking a user name on a › listing displays the page.
Here SUSE Manager administrators manage the permissions and activity of all the users. Here you can also delete or deactivate users.
Users can be deactivated directly in the SUSE Manager Web interface. SUSE Manager administrators can deactivate or delete users of their organization. Users can deactivate their own accounts.
Note: Users with SUSE ManagerAdministrator Role
Users with the SUSE Manager administrator role cannot be deactivated until that role is removed from their account.
Deactivated users cannot log in to the SUSE Manager Web interface or schedule any actions. Actions scheduled by a user prior to their deactivation remain in the action queue. Deactivated users can be reactivated by SUSE Manager administrators.
Warning: Irreversible Deletion
User deletion is irreversible; exercise it with caution. Consider deactivating the user first to assess the effect deletion will have on your infrastructure.
To deactivate a user:
Click a user name to navigate to the tab.
Verify that the user is not a SUSE Manager administrator. If they are, uncheck the box to the left of that role and click the button.
Click the link in the upper right corner of the dialog.
Click the button to confirm.
To delete a user:
Click a user name to navigate to the tab.
Verify that the user is not a SUSE Manager administrator. Uncheck the box to remove the role if necessary.
Click the link in the upper right corner of the dialog.
Click the button to permanently delete the user.
For instructions to deactivate your own account, refer to Section 6.7.5, “Account Deactivation”.
17.1.4.1 > #
The tab, displays the user name, first name, last name, e-mail address, roles of a user, and other details about the user.
Edit this information as needed and then confirm with . When changing a user’s password, you will only see asterisks as you type.
To delegate responsibilities within your organization, SUSE Manager provides several roles with varying degrees of access. This list describes the permissions of each role and the differences between them:
(normal user) — Also known as a System Group User, this is the standard role associated with any newly created user. This person may be granted access to manage system groups and software channels, if the SUSE Manager administrator sets the roles accordingly. The systems must be in system groups for which the user has permissions to manage them. However, all globally subscribable channels may be used by anyone.
— This role allows a user to perform any function available in SUSE Manager . As the master account for your organization, the person holding this role can alter the privileges of all other accounts of this organization, and conduct any of the tasks available to the other roles. Like with other roles, multiple SUSE Manager administrators may exist. Go to › and click the check box in the row. For more information, see Section 18.3, “ › › ”.
A can create foreign organizations; but a can only create users for an organization if he is entitled with organization administrator privileges for this organization.
— This role provides a user with all the permissions other administrators have, namely the activation key, configuration, channel, and system group administrator. is not entitled to perform actions that belong to the tab (see Chapter 18, Admin).
— This role is designed to manage your collection of activation keys. A user assigned to this role can modify and delete any key within your organization.
— This role is designed to manage Image building. Modifiable content includes Image Profiles, Image Builds and Image Stores. A user assigned with this role can modify and delete all content located under the tab located on the left navigation menu. These changes will be applied across the organization.
— This role enables a user to manage the configuration of systems within the organization, using either the SUSE Manager Web interface or tool from the rhncfg-management package.
— This role provides a user with full access to all software channels within your organization. This requires the SUSE Manager synchronization tool (
mgr-syncfrom the susemanager-tools package). The channel administrator may change the base channels of systems, make channels globally subscribable, and create entirely new channels.— This role limits authority to systems or system groups to which access is granted. The System Group Administrator can create new system groups, delete any assigned systems from groups, add systems to groups, and manage user access to groups.
Being a SUSE Manager administrator enables you to remove administrator rights from other users. It is possible to remove your own privileges as long as you are not the only SUSE Manager administrator.
To assign a new role to a user, check the respective box. SUSE Manager administrators are automatically granted administration access to all other roles, signified by grayed-out check boxes. Click to submit your changes.
17.1.4.2 > #
This tab displays a list of system groups the user may administer; for more information about system groups, see Section 7.4, “System Groups”
Section 7.4, “System Groups”. SUSE Manager administrators can set this user’s access permissions to each system group. Check or uncheck the box to the left of the system group and click the button to save the changes.
SUSE Manager administrators may select one or more default system groups for a user. When the user registers a system, it gets assigned to the selected group or groups. This allows the user to access the newly-registered system immediately. System groups to which this user has access are preceded by an (*).
17.1.4.3 > #
This tab lists all systems a user can access according to the system groups assigned to the user.
To carry out tasks on some of these systems, select the set of systems by checking the boxes to the left and click the button. Use the System Set Manager page to execute actions on those systems. Clicking the name of a system takes you to its page. Refer to Section 7.3, “System Details” for more information.
17.1.4.4 > #
This tab lists all channels available to your organization.
Grant explicit channel subscription permission to a user for each of the channels listed by checking the box to the left of the channel, then click the button. Permissions granted by a SUSE Manager administrator or channel administrator have no check box but a check icon like globally subscribable channels.
17.1.4.4.1 > > #
Identifies channels to which the user may subscribe systems.
To change these, select or deselect the appropriate check boxes and click the button. Note that channels subscribable because of the user’s administrator status or the channel’s global settings cannot be altered. They are identified with a check icon.
17.1.4.4.2 > > #
Identifies channels the user may manage. To change these, select or deselect the appropriate check boxes and click the button. The permission to manage channels does not enable the user to create new channels. Note that channels automatically manageable through the user’s admin status cannot be altered. These channels are identified with a check icon. Remember, SUSE Manager administrators and channel administrators can subscribe to or manage any channel.
17.1.4.5 > #
Configure the following preference settings for a user.
: Determine whether this user should receive e-mail every time a patch alert is applicable to one or more systems in his or her SUSE Manager account, and daily summaries of system events.
: Maximum number of items that appear in a list on a single page. If the list contains more items than can be displayed on one page, click the button to see the next page. This preference applies to the user’s view of system lists, patch lists, package lists, and so on.
: Configure which information to be displayed on the “Overview” page at login.
: Select whether to use the default comma or a semicolon as separator in downloadable CSV files.
Change these options to fit your needs, then click the button. To change the time zone for this user, click the subtab and select from the drop-down box. Dates and times, like system check-in times, will be displayed according to the selected time zone. Click for changes to take effect.
17.1.4.6 > #
This tab lists mailing addresses associated with the user’s account.
If there is no address specified yet, click and fill out the form. When finished, click . To modify this information, click the link, change the relevant information, and click the button.
17.2 #
System Groups help when diferrent users shall administer different groups of systems within one organization.
17.2.1 > #
Enable and confirm with .
Assign such a group to systems via the › subtab of systems details page.
For more information, see Section 7.3.5.2, “System Details > Groups > Join” or Section 7.4.3, “System Group Details”.
17.2.2 > #
Allows to create an external group with the link.
Users can join such groups via the of the user details page, then check the wanted , and confirm with .
For more information, see Section 17.1.4.2, “ > ”.