StrataJazz User Management

Transcription

1 Strata Decision Technology StrataJazz User Management Administrator Guide September 29, 2014

2

3 Table of Contents Introduction... 5 Creating a New User... 7 Managing Passwords... 8 Updating a Password... 8 Expiring a Password... 8 Resetting a Password... 8 Forcing a Logout... 8 Importing a User Groups Assigning Users to Groups Roles Importing Groups/Roles Security

4

5 Introduction This document aims to provide StrataJazz administrators with a guide to managing their system users. The goal of user management is to specify security access, plan access, and certain roles so that each user has appropriate hierarchical functionality within the system. Instructions are included to manage users for an LDAP setup. User Management allows administrators the ability to specify the level of access for a user in the system. Access can be set for anything from plans they can see to buttons they can click. This guide also includes administration tasks such as setting or resetting user passwords. 5

6

7 Creating a New User Complete the following steps to create a new user. 1. Go to Setup > Access > Users. 2. Click New. 3. Enter the user information on the right side: a. First name, Last Name, Username, and Password/Confirmation are required. b. While an address is not required, it is strongly recommended that all users have a valid address, or they may miss automated system messages. c. Select the User Access Administrator check box only if the new user has the rights to manage users. 4. To complete, click Save in the toolbar. The new user will not be created in the system until the changes are saved. 7

8 Managing Passwords Password management pertains only to a local user setup. For an LDAP setup, password management takes place at the domain level. Updating a Password You can update a password if a user needs to change or update his or her password. 1. Navigate to Setup > Access > Users. 2. Select the relevant user. 3. Enter the new password in the New Password field and enter it again in the Confirm Password field. 4. Click Save. Expiring a Password You can expire a password for a given user, which forces the user to create a new password on the next login. 1. Navigate to Setup > Access > Users. 2. Use the search box to locate a specific user. 3. Select the user in the list. You will see that user s profile in the right-hand pane. 4. On the toolbar, click Expire Password. The user will be prompted to create a new password upon the next login. Resetting a Password You can reset a password for a user; this process issues a one-time password. The user can then log in and change the password. 1. Navigate to Setup > Access > Users. 2. Use the search box to locate a specific user. 3. Select the user in the list. You will see that user s profile in the right-hand pane. 4. On the toolbar, click Reset Password. The user will receive an with a temporary password. Forcing a Logout You can force a user to log out of the system. This action may be necessary if important updates require the suspension of system activity. 1. Navigate to Setup > Access > Users. 2. Use the search box to locate a specific user. 3. Select the user in the list. You will see that user s profile in the right-hand pane. 8

9 4. On the toolbar, click Force Logout. The user will receive an with a temporary password. 9

10

11 Importing a User In an LDAP setup, new users are imported into the system from the Microsoft Active Directory. 1. Select Import > Import AD User(s) 2. In the dialog box, type the username of the user to create and press Enter. a. This will search the Microsoft Active Directory for the user. The username entered in the search box will be the same username used by the user to log in to the workstation. b. In many organizations, the username is the part of the address before symbol. (i.e. jdoe@strata-decision.com has a username of jdoe) Note: If the user does not appear with the username, try the user s first or last name in the search. If the user still does not show up in the search, contact your organization s IS Team to ensure the user is assigned to the appropriate Active Directory Group. 3. The user information will be imported and populated in the user information fields located on the right-hand side. a. Username b. First Name c. Last Name d. Address e. Phone Number Note: The password field is not required because the user will be using his or her domain password to access the system. 4. Click Save to apply the changes 5. Update or add any group or roles and click Save. 6. Contact the user to verify that the user can access the StrataJazz system. 11

12

13 Groups These definitions describe generic groups and do not represent actual group names. Groups: The system creates default groups with pre-assigned default roles. Based on their group assignments, users will have access to relevant solutions and basic user capabilities. Primary User Group Basic User: The user will be able to open and edit plans, launch existing reports on plans, and send messages within the specified solution. Primary User Group System Administrator: The user will have the same rights as a basic user in addition to system administrative rights and access to all plans within the selected solution. Assigning Users to Groups Complete the steps below to assign a user to a group. 1. Navigate to the Group Membership section at the bottom right of the User Setup page. 2. Select the user to assign to a group. 3. Click Add to Group. 4. Scroll to the group to add. 5. Click Select. 6. Click Save to save this user to the assigned groups. Roles These definitions describe generic roles and do not represent actual role names. Roles: Role membership specifies a user s ability to manage information within a solution. Also, role security can be assigned at different folder levels to manage scope of access (through Score Dimension Editor). Primary User Role Edit: The user will be able to create and edit content for a designated folder level and all levels below (the child inherits security from the parent level). Primary User Role Read: The user has access to view plans at the designated folder level and levels below. 13

14 Primary User Role - [Review Step] Reviewer Candidate: The user is designated as a reviewer for a specified review step and will have access to view and edit the proposals that enter the user s queue. To assign a user to a role, see your solution-specific administrator guide. 14

15 Importing Groups/Roles Importing Groups and Roles can be very useful. For example, if a new or existing user (user 2) needs to have the same groups/roles (i.e. same level of access) as another user (user 1), an admin can import the groups and roles from user 1 onto user 2. This is done in the user interface under Setup > Access > Users. Complete the following steps after user 2 has been saved in the system: 1. Scroll down to the Group Membership/ Role Membership section at the bottom right for this user. 2. Click on Import Groups/Import Roles. 3. Search for User 1 in the identity window that opens. 4. Click Select. Security The security for a user depends on the groups or roles to which the user is assigned. Assigning security can be as easy as copying over security rights from a pre-existing user to the new user. Below are the two types of security: System Security: controls the buttons and menu items accessible to a user within the user interface Plan Security: determines which plans the user is able to access 15