User Management

It is important to have defined permissions for users to access the Userful Infinity Platform. This guide helps administrators create roles-based access using Users and User Groups to model these privileges.

Users

A user has defined permissions to access the Userful Infinity Platform. A user can be an administrator with full access to the platform or an application-level user with limited access to the application(s).

Create a User

1. Click on the option.
2. Enter the Username. The username value is unique for all users.

3. Enter the First Name and Last Name.

4. Enter the Email Id. The email id value is unique for all the users.

5. Enter the password in the Password and Confirm Password text box. Note that this is a temporary password and the user will be prompted to reset their password on the initial login.

6. Assign the user to the User Groups. To learn more about different user groups refer to the User Group section.

7. Click .
8. The user appears on the screen with an active status.

Actions

Click on the three-dot menu against the user you wish to edit.

Edit

This option helps edit the First Name, Last name, Email Address, User Groups, and Account Status of the user.

Reset password

This option helps reset the user's password. Click on the option. The Reset Password side modal appears. Enter the new password in the side modal that appears. Click Save after making the new changes.

Assign User Group

This option helps assign the user a new user group(s). Click on the Assign User Group option. A scroll box with a list of all user groups appears. Check the box for each applicable group(s). The user is added to the user group(s).

Disable Account

This option helps disable the user account. Click on this option. The Diable Account warning box appears. Click on the Disable option, the user access gets disabled.

Delete

Use this option to delete the user. Click on this option. The Delete User warning box appears. Click on the Delete option, the user gets deleted.

This example shows how a new user assigned to the DecisionsOperators user group accesses the Decisions application.

1. Use the URL to access the Userful Infinity Platform. This URL is set up by the administrator during the initial setup.

2. The Login screen appears.

3. Enter the Username and password. These credentials are set by the administrator while creating a new user.
4. Click on the Sign In option. A notification indicating a password reset is required appears.
5. Enter the new password and confirm it. The password must contain at least one letter and one number and a minimum of 6 alphanumeric characters. Allowed special characters include: @,$,%,#,?,&,-.

6. Click on the Sign In option.

   
7. Click on the Decisions application card to create and manage an operation center.

Because only administrators can create an operations center, the option is hidden on the operations center screen. Users can only access the existing operations centers. Find similar functional capabilities hidden from the end-user based on their assigned user group.

User Groups

A User Group is a collection that contains multiple users assigned the same permissions. Groups enable you to create policies and define conditions for your permissions when one or more users need access to the platform resources. Userful Infinity Platform offers the following predefined user groups.

Role Name	Access Offered
Administrator	It provides access to all the features offered by the Userful Infinity Platform.
DecisionsAdministrators	It provides access to all the features available in the Decisions application.
DecisionsOperators	It provides access to view the operations centers, create sources, create and update a layouts, manage source alignment on the canvas, map destinations, etc. Decisionsoperators cannot edit or delete an existing source.
EngageAdministrators	It provides access to all the features of the Engage application, including content management and creating mapping groups.
EngageUsers	It provides access to all the features of the Engage application, including content management and creating mapping groups.
SpacesAdministrators	It provides access to create meeting rooms, map destination(s) to the meeting room, cast the meeting room, etc.
ArtisticAdministrators	It provides access to all the features available in the Artistic application.
ArtisticUsers	It provides access to create mapping groups, sources, playlists, and schedules in the Artistic application. It also allows the users to remap the source and destination(s) to the existing mapping group, etc. Artistic users cannot edit or delete an existing source.
TrendsAdministrators	It provides access to all the features available in the Trends application.
TrendsUsers	It provides access to create mapping groups, sources, destinations, playlists, and schedules. It also allows to remap sources and destinations to the existing mapping groups. Trends users cannot edit or delete an existing source.
RemoteAdministrators	It provides access to all the features available in the Remote application.
RemoteUsers	It provides users the access to the Browse Channels feature. Remote users cannot create or delete channels or streams.

Additional Roles

User groups offer the following additional roles that help implement granular user access to the admin applications.

Application	Roles
System Configuration	Limited access to System Configuration. View-only access to System Configuration.
Sources and Destinations	View-only access to Sources and Destinations.
uControl	Full access to the uControl application. Users can create, edit, delete, start, and stop Presets. Limited access to the uControl application. Users can only start, and stop Presets.
User Management	Full access to the User Management application and the Initial Setup application.
Monitoring Dashboard	Access to the Monitoring Dashboard application.

Create a Group

Create a new user group that is distinct from the existing user groups.

1. Click on the option. The Create User Group side menu appears.
2. Enter the Name and Description.

3. Click . The user group appears on the screen.

Modify the user role by using the options provided by the Actions menu.

Actions

Click on the three-dot menu against the user group you wish to edit.

Edit

This option helps you modify user details for the new user. Note that predefined user roles cannot be modified.

• Roles Enable the checkbox against the roles you wish to assign to the user group. Click Save. Note that you cannot assign new roles to the predefined user groups.
• Users Select the user(s) to add to the user group and click save.

• Details Enter the user description for the user group and click save. Note that the details of the predefined user groups cannot be modified.

Duplicate Group

Use this function to create a new user group with the same user roles. Click on the Duplicate Group option the Create User Group side menu appears. Enter the Name and Description. Click Save.

Assign Users

Use this option to add users to the user group. Click on the Assign Users option. The scroll box listing all the users appear. Enable the checkbox next to each username you want to add to the user group. The user gets added to the user group.

Delete

Use this option to delete the user group. Click on the Delete option. The Delete User warning box appears. Click on the Delete option, the user gets deleted. Note that the predefined user groups can not be deleted.

Clearance Levels

Manage permissions of User Groups by assigning the group a Clearance Level. The platform provides auto-generated clearance levels for each application. Clearance levels are of two types: Edit and Execute.

Create Clearance Level

1. Click on the option. The Clearance Level menu appears.
2. Enter Details.

   • Enter the Name and Description.

   • Select the User Groups.
3. Click The clearance level gets assigned to the selected user groups.

   

Note that Clearance level configuration supersedes the user group level configuration. The platform has default user groups for each application. You can create new user groups and assign clearance levels to each one. When you delete a clearance level, the user groups' permission configuration is applied to the users.

External Authentication

Authenticate users using Lightweight Directory Access Protocol (LDAP). LDAP simplifies the user management process, saves time, and centralizes the authentication process. The platform allows a batch size of 1000 users to be imported from Active Directory/ Red Hat Directory Server in a single import transaction. This walkthrough guide is intended for administrators familiar with Active Directory service and Red Hat Directory Server.

Setup LDAP Integration

1. Click on the option. The LDAP Integration Setup menu appears.
2. Enter Details

LDAP Configuration

• Enter the Name.

• Select the Vendor.

• Enter the User LDAP Attribute.

• Enter the RDN LDAP Attribute.

• Enter the UUID LDAP Attribute.

• Enter the Connection URL.

• Enter Users DN.

• Select the Search Scope. ONE_LEVEL SUBTREE_LEVEL

• Select the Bind Type. None Single

• Enter the Bind DN.

• Enter the Bind Credential. Sync Settings

• Enter the Batch size It is the count of LDAP users imported from LDAP to be authenticated by the platform in a single transaction.

• Periodic Full Sync Enable this option to perform a periodic full sync of users to the User Management application after the specified time interval. Note that this value is in seconds.

• Periodic Changed Users Sync Enable this option to periodic sync of changed (new and modified) users to the User Management application after the specified time interval. Note that this value is in seconds.

• Cache Settings It is the time frame for which the cache will be stored or the lifespan of the cache entry. EVICT_WEEKLY- Enter the day, hour, and minute of the day the cache becomes invalid. EVICT_DAILY- Enter the hour and minute of the day the cache becomes invalid. NO_CACHE- Does not store any cache. MAX_LIFESPAN- Enter the minute of the day the cache becomes invalid. DEFAULT- Choose to sync the default setting. DEFAULT- Choose to sync the default setting.

LDAP Group Mapper

• Enter the LDAP Group DN.

• Enter the Group Name LDAP Attribute.

• Enter the Group Object Class.

• Enter the Membership LDAP Attribute.

• Select the Membership LDAP Type.

• Enter the Membership User LDAP Attribute.

• Select the Mode IMPORT LDAP_ONLY READ_ONLY

• Select the User Groups Retrieve Strategy.

• Enter the value for Member of LDAP Attribute.

• Click .

3. The system takes time, and the integration appears on the screen.

   
4. Click on the three-dot menu and then on the Sync LDAP option.
5. Click on the dialog box that appears.
6. Navigate to the Users tab to view the imported users. Users imported from LDAP are displayed with LDAP Type.

   

Password Policy

The password must contain at least one uppercase letter, one lowercase letter, one special character, one number, and a minimum of 8 alphanumeric characters. The password must not contain the username. Allowed special characters are@, $, !, %, *, #, ?, &, -

Login/ Admin Events

Login

Use this module to track login details.

Login Details	Description
Login Time	This shows the date and time the user signed into their account on the Userful Infinity Platform.
Event Type	This shows Login as the event type.
IP Address	This shows the IP Address the user used to access the platform.
Client	This shows the client used to access the platform.
User	This shows the username used by the user to access the platform.
Error	This details any errors users may encounter while logging in.

Use the Search functionality to search for a specific login event.

Use the Toggle sort order feature to sort the records in ascending or descending order based on the column type.

By default, the page lists only 15 records, modify this value using the option to load more records. You can also use the page navigation option to view other pages.

Admin Events

This module lists the time stamp at which the admin performed an action. You can use this module to monitor admin activities. Use the Search functionality to search for a specific event.