View: User Management

Function: The view shows all registered users and user groups of the current Automation Servers and provides functions for editing existing users and groups and adding new users and groups.

Call: <user name> → User Management

Table 31. Tab: Users

Search	Input field for a search string in order to find a user
Force MFA for all users	: Multifactor authentication is enforced for all users. This option can be enabled and disabled only by a user with administrator permissions.
List of users with Name, User name, Email, and Role
Email.	: The email address has been successfully validated. : The email address has not been successfully validated, or not yet validated. : A validation email will be sent to the email address.
Kiosk User	: The user cannot change his own user data. The Kiosk user option can be enabled and disabled only by a user who has the "Administrator" role.
	The Name, User name, Email, and Role input fields can be edited. A role can be selected from the Role list box.
	A ticket for resetting the password is created. The ticket is shown in the Tickets → All Tickets view. A dialog opens which allows the ticket to be sent directly to the user.
	Opens the Groups view and shows all groups where the user is a member
	Opens the MFA Settings for user <user name> dialog. Multi-factor authentication (MFA) for the user can be activated or deactivated here. When MFA is activated, the user has to enter a token in addition to the user name and password when signing in The token is generated with a mobile device which has been registered for this purpose. As long as MFA is deactivated, the icon is displayed as a red triangle (). After the first time signing in with MFA, it is displayed as a green box with a lock symbol ().
Add User	Opens the Add User dialog to enter the user data of a new user

Table 32. Groups

Search	Input field for a search string in order to find a specific group
List of user groups with Name and Description	When you click a user group, the Edit Group dialog opens. In the dialog, you can edit the Name and Description. Moreover, you can add the displayed user to the group or remove the user from the group by selecting or clearing the option in the Selection column (). The performed changes are saved when you click Save.
	Opens the Delete Group dialog to confirm that the group should be deleted
Add Group	Opens the Create Group dialog to specify the Name and Description of the new group. In the dialog, you can add the displayed users to the new group by selecting the option in the Selection column (). The new group is created by clicking Add.

For more information, see: Using Multi-Factor Authentication (MFA) to Sign In to the Server and Resetting the Server Password

Table 33. Password Policy

Mandatory Password Options

List of required password options

Additional Password Options

Additional password options which can be changed by users with administrator permissions:

Minimum length: Value >= 8
Blacklist: Input field for character combinations which must not be used in a password
: The blacklist can be uploaded as a plain text file (*.txt).
Requires a special sign
Must not contain user name, display name or e-mail
The last ten passwords must not be reused
Require password change on next login