Managing Local User Accounts
You add, edit, or remove users, specify passwords, and assign user roles to local-user accounts on the User & Groups page in the ztC Console. You can also select a user and view the time when the user's password was last updated, and an administrator can force a selected user to change the user's password on the next login. You can assign a user who is not an administrator the task (or privilege) Join a computer to the domain. (To grant or deny access for established user accounts in an Active Directory domain, see Managing Domain User Accounts.)
Local user accounts reside on the ztC Edge system itself, as opposed to a central domain server. You can find local accounts on the Users & Groups page by looking for entries labeled Local User in the Type column.
User roles are:
- Administrator: full system administrator privileges
- Platform Manager: system administrator privileges except for adding, removing, and modifying users
- VM Manager: ability to manage VMs (see Managing Virtual Machines for detailed information)
- Read-only: ability to view but not to change system configuration or to install system software
For the procedures below, begin by opening the Users & Groups page: click Preferences in the left-hand navigation panel to open the Preferences page, and then, under Administrative Tools, select Users & Groups.
To add a user account
-
In the lower pane, click Add.
- In the Role drop-down window, select Administrator, Platform Manager, VM Manager, or Read-only.
- Provide values for the User Name, Password (and Confirm Password), Email Address, and Real Name fields. User names may be from 1 to 64 characters long, and must include no white space. Passwords must conform to the Password Policy of the system.
- Click Save.
To edit a user account
- Select the account you want to edit.
-
In the lower pane, click Edit.
- Change the user's information, as necessary. For example, to change a user’s role, in the Role drop-down window, select Administrator, Platform Manager, VM Manager, or Read-only.
- Click Save.
To assign "Join a computer to the domain" to a non-administrator
- Add a user who is not an administrator to the AD server, and delegate to the user the task (or privilege) Join a computer to the domain. For details, see the documentation for the AD server.
-
On the ztC Edge system, edit the /etc/resolv.conf file to add the IP address of the AD domain controller. The following line is an example:
nameserver 123.456.28.910
- In the ztC Console, enable AD if it is not already enabled. See Configuring Active Directory.
To remove a user account
- Select the account to remove.
-
Click Remove in the lower pane.
- Click Yes in the Confirm dialog box.
Notes:
- You cannot delete the default admin account, although you should change its name and password by editing the account.
- You must specify an email address for each user account, including admin, to enable the forgot password feature. If a user account does not include an email address, and the user clicks the Forgot Password? link on the console login page, the system sends an email to user@example.com.