Users
Add, modify, lock, unlock and remove users of the internal realm in the XPLG console, let users change their own password and display name, and create users remotely with the SDK.
What you will do: create a local user with the groups and policy it needs, and handle the everyday cases — a locked account, a changed role, a departure.
Users are managed in XPLG only when the internal XpoLog realm authenticates them. With an external realm (Active Directory, SAML, a gateway) the identities live in your directory: XPLG resolves each sign-in to a group and its policy, and the Users console is not where you work — see Groups and Active Directory and LDAP. A local user must belong to at least one group, so that permissions are granted at group level rather than per user.
Add a user
- Open Security > Users and choose Add User.
- Enter the Username, the Password twice and the Display Name shown across the system.
- Under Associated Groups, move at least one group from Available to Associated — the groups the user belongs to.
- Under Administered Groups, optionally move the groups this user may administer.
- Under Policy Settings choose Use the Policy of the selected groups or Use the following Policy and pick one; see Policies.
- Save. The user appears in the list.
Everyday operations
| Task | Where | Notes |
|---|---|---|
| Find a user | Security > Users, filter by group | Useful when the list is long |
| Change display name, groups, administered groups or policy | Edit on the user's row | The username and password cannot be changed by the administrator here |
| Lock a user out | Edit, select Lock Out, save | An Unlock link appears on the row |
| Unlock a user | Unlock on the row | A user who fails to sign in five times is locked automatically |
| Remove a user | Delete on the row, confirm | The Administrator user cannot be removed |
| Change your own password or display name | Security > User General Settings: old password, new password twice, display name | Local-realm passwords are user-changeable and policy-governed; replace the installer's administrator password before anyone else uses the console |
By SDK
java -cp xpologClient.jar com.xpolog.sdk.client.XpoLogSDKClient \ -xpologURL https://<host>:30443/logeye -user <admin> -password <password> \ -api securityUsers -name <username> -userPassword <password> -displayName "<Display Name>" \ -userPolicy <policy> -selectedGroupsList "<group1>;<group2>" -override true
override true updates an existing user. See SDK and CLI reference.
Federated users
A user who signs in through Active Directory, LDAP, SAML, OAuth or a gateway is not created here. XPLG retrieves the user's directory groups at sign-in, matches them to groups of the same name in XPLG and applies the matched group's policy; the groups retrieved are written to the audit log, which is how you find the names to create. Credentials of federated users are never stored by XPLG.
Next: Groups
Source: XPLG wiki, pages 1594133418, 1594133416, 1594133424, 1594133426, 1594133438, 1594133481, 1594133410, 1597014018, 3161718811, 3161489438, 1594133513 (https://xpolog.atlassian.net/wiki/spaces/XPOL/pages/1594133418).
