Document toolboxDocument toolbox

Managing User Data

On the Users and Roles pages, the Select checkbox is to the left of an Action icon. When you select multiple rows of a table, a whole page, or multiple pages of either data type, you can choose Delete from the Action menu for any selected row. You cannot edit multiple rows of data. The Delete option is the only available option after selecting multiple rows.

Doing so enables you to delete all selected records from the table. Exercise caution when performing this action, as you may unintentionally delete rows of data that you did not wish to select.

While it is possible to select the entire table's worth of data on the Users page (Settings icon > User Admin > Users), the admin user account can never be deleted; the default set of NetMRI Roles (Settings icon > User Admin > Roles) also may not be deleted (though they are otherwise editable) and the Delete option is ghosted for each of them in the Action menu. In all cases, NetMRI user accounts with read-only privileges will not be able to perform this action.

You can use a feature called Force Local Authentication for any user account in your appliance:

  • Administrators can enable the Force Local Authentication checkbox for local user accounts to provide a specific profile to users that also exist on a remote authentication/authorization service. In the user configuration, you enable the Force Local Authorization option and its read-only Last Login value will show the external service name. Locally created user accounts automatically enable this option, which can be disabled at any time. If the user is learned by NetMRI through a remote authentication/authorization service, this option is automatically disabled.

  • When a user is learned by NetMRI through a remote authentication/authorization service, the administration cannot then re-create the user account. You may activate the Force Local Authentication checkbox for an externally learned account and redefine its password and other user details. The Local authentication service also must be placed first in the Authentication Services list. By taking these steps, you can ensure that an account is verified and authorized locally, without using the same login defined on the external service. An alternative is to define a different local login credential for the user.

  • The Force Local Authentication setting is automatically enabled for all new locally created users.

You can change local user accounts settings at any time:

  • You can change the local user password.

  • You can disable a user account at any time.

  • You can change assigned roles and device groups for an account, but changes will persist only when the account is locally authenticated and authorized, with the Local authentication service taking the highest Priority setting and the Force Local Authentication checkbox enabled for the account.

  • You can define CLI and database credentials, notes, and email settings.