Managing users and groups

Only administrators and power users can manage users and groups. They can create new users and groups, modify their properties or delete them. It is also possible to connect the Platform to an external directory (LDAP directory for instance). Users can only consult users and groups directories. Administrators and power users can create, edit and delete users and groups. When you use an external directory for users and groups, the actions available on users and groups are limited, even to administrators. Users and groups management is available: from the Admin Center, in the Users & groups tab, from the Home tab, in the Users & groups tab.

On this page Managing users User's parameters Creating a user Editing a user's properties Changing a user's password Deleting a user Managing groups Groups parameters Creating a group Editing a group Deleting a group

Managing users

User's parameters

Creating a user

Only administrators and power users can create new users.

By default, the Nuxeo Platform has one user, called Administrator. This user is the administrator. You must use this user to create new users and delegate them access rights.

Users must be at least in "administrators" or "members" group, or one of their sub-groups to be able to access the application's content.

To create a user:

1. Click on the Admin Center main tab, and then on the Users & groups tab.
   The members management interface opens on the user directory search form.
2. Click on the Create a new user button.
3. Fill in the user creation form.
   Mandatory fields are indicated by a red asterisk.

4. Click on the Save button.
   The card of the new user is displayed. You can modify its properties and its password.

   If you need to create several users click on the Save and create button. The user is saved and the user creation form is displayed so you can immediately create another user.

   The user can immediately connect to the Nuxeo application using his or her username and password.
   

Editing a user's properties

Only administrators and power users can modify other users' properties. But every user can modify his own properties from the Profile tab of his Home.

You cannot edit the username, as it is the ID of the user on the application.

When you are using an external directory for users management, the Edit tab is not displayed as you cannot edit the users' properties (managed directly from the directory).

To modify a user's properties:

1. Click on the Admin Center main tab, and then on the Users & groups tab.
   The members management interface opens on the user directory search form.
2. Search a user and click on the user's name to open his or her card.
   The user's card is displayed.
3. Click on the Edit tab.
4. Modify the fields in the modification form.
5. Click on the Save button.
   The View tab is displayed with your modifications

Changing a user's password

Only administrators and power users can modify other users' password. However every user can modify his or her own password.

When you use an external directory for users management, the Change password tab is not displayed as you cannot edit your password.

To modify a user's password:

1. Click on the Admin Center main tab, and then on the Users & groups tab.
   The members management interface opens on the user directory search form.
2. Search a user and click on the user's name to open his or her card.
   The user's card is displayed.
3. Click on the Change password tab.
4. Type the new password and confirm it.
5. Click on the Save button.
   The View tab is displayed.
   The user must use his or her new password the next time he or she logs in.

Deleting a user

Only administrators and power users can delete users.

Deleting a user is a permanent action.

To delete a user:

1. Click on the Admin Center main tab, and then on the Users & groups tab.
   The members management interface opens on the user directory search form.
2. Search a user and click on the user's name to open his or her card.
   The user's card is displayed.
3. Click on the Delete button.
   A window pops up.
4. Click on the OK button.
   The user is deleted. He or she cannot log in to the Nuxeo application. 

Managing groups

Groups of users can be created and their properties modified directly in the Nuxeo Platform.

To make access rights management easier, you can create groups of users. Instead of giving (or denying) access rights to single users and repeat the same operations several times, you can give several users the same right in one single manipulation by using a group.

Default groups are:

• members: users in this group are the end-users users of the application.
• powerusers: users in this group are the functional administrators of the application. They have a restricted access to the Admin Center, the administration user interface of the Nuxeo Platform, from which they can manage users and groups, edit the vocabularies and define the default dashboard of users.
• administrators: users in this group are the technical administrators of the application. They have access to all the Admin Center features and are in charge of managing the application. Beside the functional administration features, they can edit the application configuration, install packages on the application, consult the application's statistics, restart the server, etc.

Default groups Users must be in one of the groups "members" or "administrators" to be able to access content. Power users must be in both the "powerusers" and "members" groups.

Groups can be composed of users and of sub-groups. Sub-group's members automatically become members of the parent group. Thus, they are granted all the access rights you give to the group. You can create as many groups as needed.

Groups parameters

Creating a group

Only administrators and power users can create groups of users.

To create a group of users:

1. Click on the Admin Center main tab, and then on the Users & groups tab.
   The directory opens on the Users tab.
2. Click on the Groups tab.
   A search form and the list of the existing groups is displayed.
3. Click on the Create a new Group button.
4. Fill in the creation form.

5. Click on the Save button.

   If you need to create several groups, click on the *Save and create* button. Your group is saved and the group creation form is displayed so you can immediately create another group.

   The View tab of the group's card is displayed.

Editing a group

Only administrators and power users can modify groups.

Modifying groups most often consists in adding or removing members of the group. The name of the group cannot be changed.

To edit a group:

1. Click on the Admin Center main tab, and then on the Users & groups tab.
   The directory opens on the Users tab.
2. Click on the Groups tab.
   A search form is displayed.
3. Search a group and click on its name to open its card.
   The card displays the members and sub-groups of the group in the View tab.
4. Click on the Edit tab.
   The modification form is displayed.
5. Modify the group's members and click on the Save button.
   The View tab of the group is displayed with the modifications you just made.
   The new group members are immediately granted the group's access rights.
   The users who are no longer members of the group are denied group's access rights. However they still have their individual access rights.

Deleting a group

Only administrators and power users can delete groups.

To delete a group:

1. Click on the Admin Center main tab, and then on the Users & groups tab.
   The directory opens on the Users tab.
2. Click on the Groups tab.
   A search form is displayed.
3. Search the group to delete and click on its name to open its card.
   The card displays the members and sub-groups of the group in the View tab.
4. Click on the Delete button.
   A window pops up.
5. Click on the OK button.
   The group search form is displayed.
6. The group is displayed and its members lose the group's access rights.