Creating a user

Warning

Data model objects: safes, users, servers, accounts and listeners are replicated within the cluster and object instances must not be added on each node. In case the replication mechanism fails to copy objects to other nodes, contact technical support department.

1. Select Management > Users.
2. Click Add.

Note

Wheel Fudo PAM enables creating users based on the existing definitions. Click desired user to access its configuration parameters and click Copy user to create a new object based on the selected definition.

3. Enter a unique user login.

Note

The Login field is not case sensitive.

4. Select the Blocked option to disable user account after it is created.

5. Define account’s validity period.
6. Select user’s role, which will determine the access rights.

Note

Access rights restrictions also apply to API interface access.

Role	Access rights
user	Connecting to servers as defined in connections, to which the user has been assigned.
operator	logging in to administration panel browsing objects: servers, users, bastions, connections, to which the user has been assigned sufficient access permisions blocking/unblocking objects: servers, users, bastions, connections generating reports on demand and subscribing to periodic reports activating/deactivating email notifications converting sessions and downloading converted content
admin	logging in to administration panel managing objects: servers, users, bastions, connections, to which the user has been assigned sufficient access permisions blocking/unblocking objects: servers, users, bastions, connections generating reports on demand and subscribing to periodic reports activating/deactivating email notifications converting sessions and downloading converted content managing policies
superadmin	full access rights to objects management full access rights to system configuration options

7. Select user’s preferred language in Wheel Fudo PAM administration panel.
8. Grant access to safes.
9. Define time access policy.

• Click desired safe object.

• Select Enable time policy option.

• Click the weekly calendar to define time interval.

• Click OK.

10. Enter user’s full name.
11. Enter user’s email address.
12. Enter user’s organizational unit.
13. Enter user’s phone number.
14. Provide user’s Active Directory domain.
15. Enter LDAP service BaseDN parameter.
16. In the Permissions section, select users allowed to manage this user object.
17. In the Authentication section, select authentication type.

External authentication

• Select External authenticaiton from the Type drop-down list.
• Select external authentication source from the External authentication source drop-down list.

Note

Refer to External authentication topic for more information on external authentication sources.

Password

• Select Password from the Type drop-down list.
• Type password in the Password field.
• Repeat password in the Repeat password field.

SSH key

• Select SSH key from the Type drop-down list.

• Click i icon and browse the file system to find the public SSH key used for verifying user’s identity.

One-time password

Warning

One-time passwords are used for implementing AAPM use case scenarios.

• Select One-time password from the Type drop-down list.

18. Click Add authentication method to define more authentication methods.
19. Click Save.

Related topics:

• Users synchronization
• Data model
• System initiation
• Servers
• Accounts