Creating and editing users

When setting up users, you must assign them to groups with allocated roles. This determines the user permissions.

1. From the Netcool/OMNIbus Administrator window, select the User menu button.
2. Click Users. The Users pane opens.
3. To add a user, click Add User in the toolbar. The User Details window opens.
4. To edit a user, select the user to edit and then click Edit User in the toolbar. The User Details window opens.
5. Define the user as follows:

   Username

   Type a unique name for the user. If the user is to be externally authenticated, for example, in a Lightweight Directory Access Protocol (LDAP) repository or by using Pluggable Authentication Modules (PAM), the name entered in this field must be identical to the name stored in the external authentication repository. If you are editing a user, you cannot change the name.

   Tip: When creating ObjectServer objects, their names must begin with an uppercase or lowercase letter, followed by uppercase or lowercase letters, numbers, or underscore (_) characters, up to 40 characters in length. User, group, and role names can be any text string up to 64 characters in length and can include spaces. Names of ObjectServer objects are case-sensitive.

   User ID

   Specify a unique numerical identifier for the user. This should be set to match the UNIX UID where possible. If you are editing a user, you cannot change the user ID.

   The identifier for the root user is 0. The identifier for the nobody user is 65534. Identifiers for other users can be set to any value between 1 and 2147483647.

   Full Name

   Type the full name of the user.

   Create Conversion

   Select this check box if you want to create a conversion for the user. This causes either the user name or the full name of the user to be displayed in Tivoli® Netcool/OMNIbus event lists. The name shown is determined by the value of the system.conversion.type property in the Netcool/OMNIbus Administrator properties file $NCHOME/omnibus/etc/nco_config.props. This property creates a conversion between the user ID and the user name or full name of each newly-created user.

6. From the Groups tab, specify the groups to which the user should belong. Complete the tab as follows:

   Unassigned Groups

   This list displays the available groups to which you can assign the user. To assign the user to one or more of these groups, use the arrow keys to move the groups to the Assigned Groups list.

   To move all groups to the Assigned Groups list, click >>. To move a single group or multiple groups to the Assigned Groups list, select each group and then click >. You can use the SHIFT key for consecutive selections, or the CTRL key for non-consecutive selections.

   Note: If you do not add the user to a group, the user will have no permissions.

   Assigned Groups

   This list displays the groups to which the user is assigned. To unassign groups, use the arrow keys to move the groups to the Unassigned Groups list.

   To move all groups to the Unassigned Groups list, click <<. To move a single group or multiple groups to the Unassigned Groups list, select each group and then click <. You can use the SHIFT key for consecutive selections, or the CTRL key for non-consecutive selections.

   Add new group

   Click this button if you want to create a new group to which the user can then be assigned. The Group Details window opens. Complete this window and save your changes.

   When you return to the Groups tab in the User Details window, the new group will be added to the Unassigned Groups list. You can then assign the user to this group.

7. From the Restriction Filters tab, specify any restriction filters that you want to assign to the user. You can use restriction filters to prevent the user from viewing or modifying certain rows in ObjectServer tables. Complete the tab as follows:

   All Restriction Filters

   This list displays the available restriction filters that have been set up. To assign a restriction filter to the user, select the restriction filter row and then click Add Restriction Filter. The selected restriction filter is transferred to the Assigned Restriction Filters list.

   If no restriction filters have previously been set up, or if you want to create a new restriction filter and assign it to the user, click New Restriction Filter. The Restriction Filter Details window opens. Complete this window and save your changes.

   When you return to the Restriction Filters tab, the new restriction filter will be added to the All Restriction Filters list. You can then assign this restriction filter to the user.

   Assigned Restriction Filters

   This list displays the restriction filters that are assigned to the user. To unassign a restriction filter, select the restriction filter row and then click Remove Restriction Filter. The selected restriction filter is transferred to the All Restriction Filters list.

8. From the Settings tab, specify authentication details for the user and make the user active on the system.

   Password

   Type an optional password for the user. Asterisks (*) appear in place of the password characters that you type.

   If the user is to be externally authenticated, the password is stored in the external repository, so leave this field blank.

   Verify

   If you typed a password in the Password field, retype the password here.

   Change

   Click this button to reset the user password. You must then retype it in the Password and Verify fields.

   This button is visible only when editing a user.

   External Authentication

   Select this check box to externally authenticate the user. Clear this check box to store the user name and associated password in the ObjectServer, and to perform ObjectServer authentication.

   User Type

   This read-only field indicates the type of user. This is set automatically based on the groups to which the user belongs.

   User Enabled

   Select this check box to activate the user account and allow login access to Tivoli Netcool/OMNIbus. New user accounts are activated by default.

   Clear this check box to create the user account without activating it. You might choose to do this if you want to deny login access to the user until all the appropriate permissions are assigned to them.

9. Save or cancel your changes as follows:

   OK

   Click this button to save the user details and close the window. New users are added to the Users pane.

   Cancel

   Click this button to close the window without saving your changes.