Managing user accounts
The Access Manager perspective contains the User Management view. This view enables you to create and manage user accounts and assign them to datastores.
In order to work in the Access Manager perspective, you must have a System Administrator role and be enabled to manage user accounts and datastores.
Use the Access Manager view
to:
- Add, modify, delete, or copy user accounts
- Adding a user account is necessary to provide users with the ability to connect to Access Server and log into Management Console. When adding a user account, you must specify a unique user name. When setting a password for the user, it must meet any complex password requirements you may have set in Management Console.
- Assign a datastore to a user
- Assigning a datastore provides the user access to an instance of CDC Replication and the ability to connect to the datastore that you have made available for replication on the server.
- Change the security role of a user
- Changing the security role on a user account determines the level of access a user has in Management Console. Users can work in either a System Administrator account, Administrator account, Operator account, or Monitor account.
- Generate a report on selected user accounts
- Generating a report on a specific user account can help you keep track of which datastores the user has access to, the role of the user, the date of user account creation, and the last time it was modified. You can also track account status settings such as if the account is locked, disabled, if the user is required to change their password at next login, or if the account has a password expiry policy set on it.
Understanding user roles
There are four user role types available in the Management Console, each with varying degrees of access and control:- System Administrator
- Specifies that users assigned to this role can perform all available operations in Management Console. Only users that require full operational access to the Monitoring, Configuration and Access Manager perspectives should be assigned to this role. System Administrators can also modify system parameters to calibrate their replication environment.
- Administrator
- Specifies that users assigned to this role can access both the Monitoring and Configuration perspectives in Management Console. Administrators can create new subscriptions, can add, import and export projects, but are not able to access the Access Manager perspective, and cannot add or edit users or datastores. Administrators can start and end replication.
- Operator
- Specifies that users assigned to this role can access both the Monitoring and Configuration perspectives in Management Console. Operators can add, import and export projects, but they cannot create new subscriptions. Users assigned to the Operator role can start, stop, and monitor replication activities. They can also view the tables selected for refresh and start a refresh on a subscription. Operators can view notifications sent by subscriptions or datastores. However, users assigned to this role cannot configure replication and select or remove tables from a refresh.
- Monitor
- Specifies that users assigned to this role only have access to the Monitoring perspective in Management Console. Users assigned to the Monitor role can view events and statistics. Monitors can view the replication state and status of a subscription and can view latency threshold information. However, users assigned to this role cannot start or stop replication, configure replication, refresh tables, or view notifications sent by subscriptions and datastores.