A user in role 'User Admin' can inspect the user contact data of every registered user account, is able to assign and revoke user roles and can change the activation state of accounts (e.g. approve user registrations and inactivate accounts).
All functionality is available using the web frontend: http://host.example/nag-web-jsp/userAdmin/management/overview.
Selecting a user account from the User Management Page linked above, the user account administrator has a couple of options regarding the user account:
Every user account is subject to an activation state that regulates whether the account is active, requires an administrative registraton grant etc. Using the Account State section of the account management page you can change the state of the account, thus influencing whether the account is active or not.
Accounts that are inactive or waiting for a administrative registration grant cannot login (using the web frontend or webservices). If the user account was active before and is subscribed to any projects, the project and the project membership remains active and the user will still receive notifications.
The Role Management section lists the roles a user is linked with and offers the ability to grant/revoke roles. Every role is subject to a number of rights on the affected Naggregator instance and should be assigned/revoked with caution. The following roles are available:
Guest | Guests are unauthenticated users and represent the most limited role. |
User | A registered user. The user can access the webpage and edit the own credentials and contact details. |
User Admin | The user admin can inspect registered users, alter contact data and grant/revoke roles. |
Project User | The user can register and use projects. The actual influence of projects depends on the corresponding project membership role. |
Project Admin | The user can inspect all registered projects and creates and manages resource regulation records. |
Project Accountant | The user has the right to use the internal ordering system to upgrade registered projects (upgrading also requires the user to be a 'Project Maintainer'). |
Accounting Admin | The user can add/remove transactions and observes orders by users. |
System Operator | The special role is assigned to one account and represents the operator of the instance. |
User Module Background Jobs | The user can perform automated background tasks in the user module (internal role, should not be set manually). |
Project Module Background Jobs | The user can perform automated background tasks in the project modules (internal role, should not be set manually). |
Accounting Module Background Jobs | The user can perform automated background tasks in the accounting module (internal role, should not be set manually). |
The contact data form enables the user administrator to edit the contact data and mail address of any user account.