User Administration Guide

Overview

A user in role 'User Admin' can inspect the user contact data of every registered user account, is able to assign and revoke user roles and can change the activation state of accounts (e.g. approve user registrations and inactivate accounts).

All functionality is available using the web frontend: http://host.example/nag-web-jsp/userAdmin/management/overview.

Available Tasks

Selecting a user account from the User Management Page linked above, the user account administrator has a couple of options regarding the user account:

User Account State Management

Every user account is subject to an activation state that regulates whether the account is active, requires an administrative registraton grant etc. Using the Account State section of the account management page you can change the state of the account, thus influencing whether the account is active or not.

Accounts that are inactive or waiting for a administrative registration grant cannot login (using the web frontend or webservices). If the user account was active before and is subscribed to any projects, the project and the project membership remains active and the user will still receive notifications.

User Role Management

The Role Management section lists the roles a user is linked with and offers the ability to grant/revoke roles. Every role is subject to a number of rights on the affected Naggregator instance and should be assigned/revoked with caution. The following roles are available:

GuestGuests are unauthenticated users and represent the most limited role.
UserA registered user. The user can access the webpage and edit the own credentials and contact details.
User AdminThe user admin can inspect registered users, alter contact data and grant/revoke roles.
Project UserThe user can register and use projects. The actual influence of projects depends on the corresponding project membership role.
Project AdminThe user can inspect all registered projects and creates and manages resource regulation records.
Project AccountantThe user has the right to use the internal ordering system to upgrade registered projects (upgrading also requires the user to be a 'Project Maintainer').
Accounting AdminThe user can add/remove transactions and observes orders by users.
System OperatorThe special role is assigned to one account and represents the operator of the instance.
User Module Background JobsThe user can perform automated background tasks in the user module (internal role, should not be set manually).
Project Module Background JobsThe user can perform automated background tasks in the project modules (internal role, should not be set manually).
Accounting Module Background JobsThe user can perform automated background tasks in the accounting module (internal role, should not be set manually).

Contact Data Management

The contact data form enables the user administrator to edit the contact data and mail address of any user account.