Users and roles

You can create and modify users and roles in the IBM® Operations Analytics Log Analysis UI to assign role-based access control to individual users.

You can use the IBM Operations Analytics Log Analysis UI to create and modify users and user roles to provide individual accounts and roles to users. This role-based access control enables the administrator to assign individual access and does not support user or object groups.

IBM Operations Analytics Log Analysis includes the following default users and roles.

unityuser: This default user is assigned the default unityusers role. All users are assigned to the unityusers role by default.
unityadmin: This default user is assigned the default unityadmins role. This user has access to all data in IBM Operations Analytics Log Analysis. No explicit permission needs to be set for this user.

The Log Analysis user registry is case sensitive. The LDAP user directory is not.

You can use the default users and roles as outlined in Table 1, or create new users and roles. For more information about creating users and roles, see Create and modify users and Create and modify roles in the Postinstallation configuration section of the Configuring IBM Operations Analytics Log Analysis guide.

Table 1. Default users and roles
Default user	Default role
`unityuser`	`unityusers`
`unityadmin`	`unityadmins`, `unityusers`

Users with the unityuser role can access the search workspace. Users with the unityadmin role can access the search and administration workspaces.

By default, all users are assigned the unityuser role.

The unityadmin user has access to all data. Only one unityadmin user with the unityadmins role is supported in IBM Operations Analytics Log Analysis.

Note: To create or modify users or roles, you must have access to the administration workspace.