Adding and Removing Users

Describes how administrators can add, remove users, and edit the role and password for users in HPE Ezmeral Unified Analytics Software.

The user search field is only enabled for HPE Ezmeral Unified Analytics Software installations configured to use an external AD/LDAP directory. The search field does not work for installations using the internal OpenLDAP configuration; however, an admin can still add new users.

Adding Users for an External AD/LDAP Directory

For an external AD/LDAP directory, complete the following steps to add a user:
  1. Sign in to HPE Ezmeral Unified Analytics Software.
  2. In the left navigation bar, select Administration > Identity & Access Management.
  3. In the search field, enter a substring search on the user's username or email ID and then enable HPE Ezmeral Unified Analytics access. The search for the user's username is case insensitive. You can also assign the admin role if you want the user to have administrative access in HPE Ezmeral Unified Analytics Software.
IMPORTANT
  • When you do not specify the Email Attribute for external AD/LDAP directory during HPE Ezmeral Unified Analytics Software installation, you will not see the Email column on the Identity and Access Management screen.

  • When you specify the value for Email Attribute, the value is syntax-checked with compliance to RFC 5322 and RFC 6532. Keycloak only allows the valid email address. If Keycloak rejects the value for Email Attribute, the value is changed to invalid-<unified-analytics-username>@<unified-analytics-domain>. You can see the value for the updated email address in the Identity and Access Management screen.

    When signing in to Unified Analytics using your email address, you must use the updated email address visible on the Identity and Access Management screen. You cannot sign in with the email address specified during installation, which Keycloak identified as having bad syntax.

Adding Users for the Internal OpenLDAP Directory

For the internal OpenLDAP directory, complete the following steps to add a user:
  1. Sign in to HPE Ezmeral Unified Analytics Software.
  2. In the left navigation bar, select Administration > Identity & Access Management.
  3. Click Add User.
  4. In the drawer that opens, enter the following information:
    • Username - Enter the username.

      You cannot add a user with a username that is a case-insensitive match of an existing username. For example, if you have a user named "bob," you cannot add a user named "Bob," and so on.

    • First Name - Enter the first name of the user.
    • Last Name - Enter the last name of the user.
    • Email ID - Enter the email ID associated with the user.
    • Password - Enter the password for the user.
    • Role - Selecting Administrator assigns the user the administrator role, which gives the user permission to act as an administrator in the HPE Ezmeral Unified Analytics Software UI. If you do not select Administrator, the user is assigned the member role.

Removing Users

To remove a user:
  1. In the list of users, select the user you want to remove.
  2. Click into the Actions column, and click the Delete option. Alternatively, click the Delete button on the screen. The system prompts you to confirm the action. Once you confirm, the user is removed.

Editing Roles and Password

To edit the role and password for a user:
  1. In the list of users, select the user you want to edit.
  2. Click into the Actions column, and click the Edit option.
  3. In the drawer that opens, change the password and role for the user.
  4. Click Update.