Managing Users

RA works with your application to manage strong authentication for administrators and end users. RA allows you to create users directly through Administration Console. Managing user information is a critical part of maintaining a secure system. The end user management operations supported by RA for this purpose include:
cara
RA works with your application to manage strong authentication for administrators and end users. RA allows you to create users directly through Administration Console. Managing user information is a critical part of maintaining a secure system. The end user management operations supported by RA for this purpose include:
2
In RA, it is highly recommended that user management tasks discussed in this article be performed by a User Administrator (UA).
How to Create a User
Every end user of your online application system is referred to as a user in Administration Console. Global Administrators (GAs), Organization Administrators (OAs), and User Administrators (UAs) can create users for organizations within their scope.
To create a user in the system:
  1. Ensure that you are logged in with the required privileges and scope to create the user.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Create User
    link to display the Create User page.
  4. In the
    User Details
    section, enter the details of the user. The following table explains the fields on this page.
Field
Description
User Name
The unique user name.
Organization
The display name of the organization to which the user belongs.
First Name (optional)
The first name of the user.
Middle Name
(optional)
The middle name, if any, of the user.
Last Name
(optional)
The last name of the user.
5. In the
Email Address(es)
section, enter the email address of the user.
6. In the
Telephone Number(s)
section, enter the phone number to contact the user.
7. Select whether you want the user to be in the
Initial
state or you want to make the user
Active
.
8. In the
Custom Attributes
section, enter the
Name
and
Value
of any attributes you want to add, such as office location.
9. Click
Create User
to create the user.
How to Search for Users
To search for users:
  1. Ensure that you are logged in with the appropriate scope.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Search Users and Administrators
    link to display the Search Users and Administrators page.
  4. Specify the search criteria to display the list of users. You can:
    • Search for users by specifying the partial or complete information of the user in the fields on this page.
      Specifying partial information in the fields works only if the fields are
      not
      marked for encryption. If any of the fields on this page have been marked for encryption, then you
      must
      specify the complete value for the search to function properly.
    • Search for users by specifying the organization's Display Name.
    • Search for users by not specifying any criteria and just clicking
      Search
      .
    • Click the
      Advanced Search
      link to display the Advanced Search page to search for users by specifying their Status or Role.
  5. Specify the required details of the users and click
    Search
    .
    A list of users matching the search criteria appears.
 
Privileges Required
As long as you do not need to create, update, activate, or deactivate a user, you do not need privileges to search. However, you
must
have the scope over the organization that the target user belongs to. For example, a GA from one organization can search for users in another organization,
if
that organization is in their purview.
How to Update User Information
To update user information:
  1. Ensure that you are logged in with the required privileges and scope to update the user information.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Search Users and Administrators
    link to display the Search Users and Administrators page.
  4. Enter the partial or complete information of the user whose account you want to update and click
    Search
    .
    A list of administrators matching the search criteria appears.
  5. Click the <
    user name
    > link of the user whose account you want to edit.
    The Basic User Information page appears.
    The Basic User Information page also displays the
    User Account Information
    (
    Account Type
    ,
    AccountID
    , and
    Status
    ) if any account type was configured.
  6. Click
    Edit
    to change the user information on this page.
  7. In the
    User Details
    section, edit the required fields (
    First Name
    ,
    Middle Name
    ,
    Last Name
    ).
  8. In the
    Email Address(es)
    section, edit the email
    addresses for the email types configured for the organization
    .
  9. In the
    Telephone Number(s)
    section, edit the telephone numbers for the telephone types configured for the organization.
  10. Update the
    User Status
    , if required.
  11. Edit the
    Name
    and
    Value
    of
    Custom Attributes,
    if required.
  12. You can either click
    Save
    to save the changes made and return to the User Information page,
    or
    you can click
    Next
    to proceed with additional configurations.
    The
    Next
    button is available only if you have configured accounts for the organization.
    If you click
    Next
    , then the User Account page appears.
  13. In the
    User Account
    section:
    • Edit the
      Status
      , if required.
    • Expand
      Advanced Attributes
      to add
      AccountID Attributes
      and
      Custom Attributes
      for the account ID.
    If this is the first account ID you are creating, you must click
    Add
    to add an account ID before you can update it. For more information about adding an account ID, see Create Account IDs.
  14. Click
    Update
    to save your changes.
Privileges Required
To update a user’s account settings, you must ensure that you have the appropriate privileges and scope. The MA can update information of any user. The GAs can update all users in their scope. The OAs and UAs can update information for users in their purview.
How to Promote a User to Administrator
To promote a user to an administrator:
  1. Ensure that you are logged in with the required privileges and scope to create administrators and update the user information.
  2. Activate the
    Users and Administrators
    tab.
  3. Enter the partial or complete information of the user whose account you want to update and click
    Search
    .
    A list of users matching the search criteria appears.
  4. Click the <
    user name
    > link of the user whose account you want to edit.
    The Basic User Information page appears.
  5. Click
    Edit
    to open the Update User page.
  6. If the user’s
    First Name
    ,
    Last Name
    ,
    Email address(es), Telephone Number(s)
    are not specified, enter the same. These attributes are mandatory for administrators.
  7. Click
    Next
    to display the User Account page.
    If no account type is configured for the user’s organization, then the
    Change Role to Administrator
    button is displayed in the Update User page itself.
  8. On the User Account page, click
    Change Role to Administrator
    to display the Create Administrator page.
  9. On this page:
    • Specify the role of the new administrator from the
      Role
      drop-down list.
    • Enter the password for the administrator in the
      Password
      and
      Confirm Password
      fields.
    • In the
      Manages
      section, select the organizations that the administrator will have scope on, and perform the following:
      • Select the
        All Organizations
        option, if you want the administrator to manage all current and future organizations in the system.
        or
      • Select the required organizations from the
        Available Organizations
        list and click the
        >
        button to add these organization to the
        Selected Organizations
        list.
      The
      Available Organizations
      list displays
      all
      the organizations that are available in the scope of the logged in administrator. The
      Selected Organizations
      displays the list of organizations that you have selected for the administrator to manage.
  10. Click
    Create
    to save the changes and create and activate the administrator.
 
Privileges Required
To promote a user to an administrator, you must ensure that you have the appropriate privileges and scope. The MA can promote any user. The GAs can promote users to OA, UA, or GA for organizations within their administrative purview. The OAs can promote users to OA or UA for organizations within their administrative purview. The
UAs can
not promote users to administrators.
How to Configure Account IDs for Users
In addition to the user name, an
account ID
is an alternate way to identify a user in the RA system. After you have configured the account types that your organization will use, you can associate one account ID per user for any of these account types. For more information about account types, see Configuring the Account Type.
Privileges Required
To configure an account ID for an account type, you must ensure that you have the appropriate privileges and scope to update the user. The MA can update any user. The GAs can update all users in their scope. The OAs and UAs can update the users in their purview.
How to Create Account IDs
You can create an account ID for any of the account types that you have configured.
To create an Account ID:
  1. Ensure that you are logged in with the required privileges and scope to update the user.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Search Users and Administrators
    link to display the Search Users and Administrators page.
  4. Enter the partial or complete information of the user for whom you want to create the account ID, and click
    Search
    .
    You can also click the
    Advanced Search
    link to search for
    Current Users
    based on their status (active or inactive) or their roles (GA, OA, or UA).
    The Search Results page appears, with all the matches for the specified criteria.
  5. Click the <
    user name
    > link of the user whose account you want to edit.
    The Basic User Information page appears.
    This page also displays the
    User Account Information
    (
    Account Type
    ,
    AccountID
    , and
    Status
    ) for the account types configured.
  6. Click
    Edit
    to open the Update User page.
  7. Click
    Next
    to display the User Account page.
  8. Select the
    Account Type
    for which you want to add the account ID.
  9. Specify the unique
    AccountID
    in the text box.
    This combination of account type and account ID will be used to identify the user in addition to the user name. You must ensure that the account type and account ID combination is unique for a particular organization.
  10. Select the
    Status
    of the user account from the drop-down list.
  11. If required, expand the
    Advanced Attributes
    section, and do the following:
    1. Provide
      AccountID Attributes
      for the account ID.
    2. Provide values for any
      Custom Attributes
      that are configured for the account type.
    You can specify up to a maximum of three
    AccountID Attributes
    for any account ID.
  12. Click
    Add
    to add the account ID.
How to Update Account IDs
You cannot change the account ID once it is created. You can only change the status of the user account and add account ID attributes.
To update an existing account ID:
  1. Complete Step 1 through Step 7 in Create Account IDs to display the User Account page.
  2. Select the
    Account Type
    for which you want to update the account ID.
  3. If required, change the
    Status
    of the user account from the drop-down list.
  4. If required, expand the
    Advanced Attributes
    section, and provide
    AccountID Attributes
    and
    Custom Attributes
    for the account ID you are updating.
  5. Click
    Update
    to save your changes.
How to Delete Account IDs
To delete an account ID:
  1. Complete Step 1 through Step 7 in Create Account IDs to display the User Account page.
  2. Select the
    Account Type
    for which you want to delete the account ID.
  3. Click
    Delete
    to delete the account ID.
How to Deactivate a User Account
To prevent a user from logging in to their account for security reasons, you can deactivate them instead of deleting them. If you deactivate users, then they are locked out of their account, and cannot log in unless they are activated again.
To deactivate a user account:
  1. Ensure that you are logged in with the required privileges and scope to deactivate the user.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Search Users and Administrators
    link to display the Search Users and Administrators page.
  4. Enter the partial or complete information of the user whose account you want to disable and click
    Search
    .
    You can also click the
    Advanced Search
    link to search for
    Current Users
    based on their status (active or inactive).
    The Search Results page appears, with all the matches for the specified criteria.
  5. Select one or more users to deactivate.
  6. Click
    Deactivate
    to deactivate the selected user.
 
Privileges Required
To deactivate a user, you must ensure that you have the appropriate privileges and scope. The MA can deactivate any user, while the GAs can deactivate all users (including other GAs) within their scope. The OAs and UAs can deactivate all users in their purview.
How to Temporarily Deactivate a User Account
Temporarily deactivating
the user differs from
deactivating
the user (See How to Deactivate a User Account). When you temporarily deactivate the user, the user is automatically activated when the end of the lock period is reached. But when you deactivate a user, you must manually activate them again whenever you want to provide access to the user.
To temporarily deactivate a user, you specify the
Start Lock Date
and
End Lock Date
for which the user is locked. When the
End Lock Date
is reached, the user is automatically activated.
To temporarily deactivate a user account:
  1. Ensure that you are logged in with the required privileges and scope to deactivate the user.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Search Users and Administrators
    link to display the Search Users and Administrators page.
  4. Enter the partial or complete information of the user to deactivate and click
    Search
    .
    You can also click the
    Advanced Search
    link to search for
    Current Users
    based on their status (active or inactive).
    The Search Results page appears, with all the matches for the specified criteria.
  5. Select one or more users to deactivate temporarily.
  6. Click
    Deactivate Temporarily
    .
  7. The Deactivate User Temporarily page appears.
  8. In the
    Starting From
    section, select the start lock
    Date
    and
    Time
    .
  9. In the
    To
    section, select the end lock
    Date
    and
    Time
    .
  10. Click
    Save
    to save your changes.
    If you do not specify any value for the
    Starting From
    fields, the user is locked from the current time. If you do not specify an end lock
    Date
    , the user is locked forever.
Privileges Required
To temporarily deactivate a user, you must ensure that you have the appropriate privileges and scope. The MA can deactivate any user, while the GAs can deactivate all users (including other GAs) within their scope. The OAs and UAs can deactivate all users in their purview.
How to Activate a User Account
You might need to activate a deactivated user. For example, you might deactivate an administrator if the administrator is on long vacation. This helps to prevent unauthorized access to that administrator’s information.
You cannot search directly for deactivated users by specifying the search criteria and clicking the
Search
button on the Search Users and Administrators page. You must perform an
Advanced Search
for such users and use the
Inactive
option in the
Current Users
section to search.
To activate a deactivated user account:
  1. Ensure that you are logged in with the required privileges to activate the user.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Search Users and Administrators
    link to display the Search Users and Administrators page.
  4. Click the
    Advanced Search
    link to search for
    Current Users
    based on their status (active or inactive).
    The Advanced Search page appears.
  5. Enter the partial or complete information of the user in
    User Details
    section.
  6. In the
    User Status
    section, for
    Current Users
    , select the
    Inactive
    and
    Initial
    options to search for all inactive or initial users.
  7. Click
    Search
    to display the list of all users matching the search criteria.
  8. Select the users you want to activate.
  9. Click
    Activate
    to activate the user.
 
Privileges Required
To activate a user, you must ensure that you have the appropriate privileges and scope. The MA can activate any user, while the GAs can activate all users within their scope. The OAs and UAs can activate all users in their purview.
How to Delete a User Account
User information in RA includes personal information (first name, middle name, last name, email address, and telephone number), credentials, and accounts. When you delete a user from Administration Console, the credential and account information must also be deleted along with the personal information. RA supports the cascaded user deletion feature by which all credential, account, and risk-related information for a user is also deleted when the user is deleted.
If you create a new user with the same name as a previously deleted user, then the new user
does not
automatically assume the privileges of the previously deleted user. If you need to duplicate a deleted user, then you must manually re-create all privileges.
To delete a user account:
  1. Ensure that you are logged in with the required privileges to delete the user.
  2. Activate the
    Users and Administrators
    tab.
  3. Under the
    Manage Users and Administrators
    section, click the
    Search Users and Administrators
    link to display the Search Users and Administrators page.
  4. Enter the partial or complete information of the user you want to delete and click
    Search
    .
    You can also click the
    Advanced Search
    link to search for users based on their status (active, inactive, or initial) or their roles (User).
    The Search Results page appears, with all the matches for the specified criteria.
  5. Select one or more users you want to delete.
  6. Click
    Delete
    .
    After you delete a user, the user information is deleted from the database. However, the user history is archived for billing purposes.
Privileges Required
To delete a user, you must ensure that you have the appropriate privileges and scope. The MA can delete any user, while the GAs can delete all users (including other GAs),
except
the MA account, within their scope. The OAs and UAs can delete all users in their purview.