Platform administration

This page will guide you trough the most common administration tasks done by admin users.

User management

From the Admin Console of Keycloak, the platform identity and access management component, you have a wide range of actions you can perform to manage users.

Creating users

You create users in the realm where you intend to have applications needed by those users. Avoid creating users in the master realm, which is only intended for creating other realms.

Procedure:

1. At the top left, go to the "Manage realms" section
2. Go to the realm used for the platform deployment. By default it can be called dataplatform or coreai
3. Ensure that your current realm is now the one you selected at the previous step.
4. Click Users in the menu
5. Click Add user
6. Fill-in the general information related the new user. Note that the "First name" and "Last name" should not remain empty even if they are not mandatory fields.
7. Click Join Groups then select all groups that the new user should be part of. A group is a set of attributes and role mappings.
8. Click Create

Setting a password for a user

If a user does not have a password, or if the password has been deleted, the Set Password section is displayed.

If a user already has a password, it can be reset in the Reset Password section.

Procedure:

1. Click Users in the menu. The Users page is displayed.
2. Select a user.
3. Click the Credentials tab.
4. Type a new password in the Set Password section.
5. Click Set Password.

Note If Temporary is ON, the user must change the password at the first login. To allow users to keep the password supplied, set Temporary to OFF. The user must click Set Password to change the password.

Requesting a user reset a password

You can also request that the user reset the password.

Procedure:

1. Click Users in the menu. The Users page is displayed.
2. Select a user.
3. Click the Credentials tab.
4. Click Credential Reset.
5. Select Update Password from the list.
6. Click Send Email. The sent email contains a link that directs the user to the Update Password window.
7. Optionally, you can set the validity of the email link. This is set to the default preset in the Tokens tab in Realm Settings.

Deleting a user

You can delete a user, who no longer needs access to applications. If a user is deleted, the user profile and data is also deleted.

Procedure:

1. Click Users in the menu. The Users page is displayed.
2. Click View all users to find a user to delete. Alternatively, you can use the search bar to find a user.
3. Click Delete from the action menu next to the user you want to remove and confirm deletion.