User Management

Creating, deleting and moving user accounts.

---

General

To manage groups and accounts in the user tree, there are corresponding buttons on each group:

Symbol	Description
Symbol missing	Create user account
Symbol missing	Create group
Symbol missing	Delete user account or group

---

Creating User Account

To create an account in a certain group, click Create User Account in it. The control element symbols are illustrated in the table above.

The second way to create a user in a group is to select the designated group and click Create User in the right part of the window in Main tab.

Next, you will see a window for creating a user account, where you need to define a number of parameters. The form for creating a user account is shown below.

ALogin listmust be entered in lowercase Latin characters, for example: j.smith

Recommendations for creating password complexity: minimum length - 10 characters; use of accountlowercase parametersand can be seen in the table below:

Parameter

Description

Username

Type in the name of the user for whom the account is being created, for example, John Smith. Maximum 12 characters.

Login

Type in the login to be used to complete the authorization procedure in various SafeUTM services. The login must containuppercase Latin lowercasecharacters; letters,use for example, j.smith. Maximum 32 characters.

Password

Type in the password. We recommend using a password corresponding to password strength requirements: minimum 10 characters, using lower- and upper-case Latin letters,of numbers and special symbols.characters. The passwordYou can beautomatically generatedgenerate automatically.

a

Repeat passwordpassword.

The phone is specified for Two-Factor Authentication.

When

you

Re-enterfill in the passwordAdvanced forsettings, verification.a If the password has been generated automatically, the field will be auto filled.

IP address/MAC address

Thiscorresponding rule will be displayedcreated in the user card in the IP and MAC authorization tab and in the Authorization -> IP and MAC Authorizationauthorization section. However, if
If this IP address or MAC address will beis used in the DHCP server rules, then the DHCP server rule will be executed in priority.

For accounts imported from MS Active Directory (AD), password verification is carried out by means of AD. Active Directory user authorization is configured in the corresponding section.section.

You cannot create a user in an Active Directory group from SafeUTM. If you need to add an additional user to an Active Directory group, you must do so in the user tree on the domain controller.

It is impossible to view or restore the account password, only changing it is allowed.

Now that you have defined all the parameters, click Save. An account will be created that will automatically have all the values of some parameters of the group in which it was created.

Creating Group

To create a group, you need to click on the corresponding control symbol to the right of the group name (you can create both a tree root group and a child group).

A window will open, in which you will need to type in the name of the new group and click Save. An example of adding a group can be seen below:

Mass Creation of Users with Authorization by IP

Mass creation of users for authorization by IP is possible. You can find out more in the article about this kind of authorization.

Alternatively, you can use the device search to create them automatically when you try to access the internet.

Deleting Group or User Account

To delete a user account, hold the pointer over the user and click on the corresponding symbol. You can also select the user and click Delete in Main tab.

Deleting a group is done the same way.

Moving User Account or Group

To move a user account to another group, select this user in Main tab and find In Group field. From the drop-down list, select the group to move the user into and click Save.