Import and Export Users

To use the Import/Export functions with Internet Explorer (IE), changes might need to be made to the security settings. To establish the necessary settings:
capam32
HID_ImportExportUsers
An alternative to configuring users in the UI is to use a CSV file. A template is provided to create an interpretable user data file for
Privileged Access Manager
. Create a file from the template, and fill in settings according to the field requirements described in Identify Users that Can Log in to the Server.
Add a User Account from a CSV File
Internet Explorer Requirements to Use a CSV File
To use the Import/Export functions with Internet Explorer (IE), changes might need to be made to the security settings. To establish the necessary settings:
  1. Open IE browser.
  2. Select
    Tools
    ,
    Internet Options
    .
  3. In the Internet Options pop-up window, select the
    Security
    tab.
    1. Select the slider zone.
    2. Click
      Custom level
      . Scroll to
      Downloads
      . For
      File download
      , select the
      Enable
      option.
  4. Click
    OK
    to save changes.
Import a CSV File
To import the users, follow these steps:
  1. Go to
    Users
    ,
    Manage Users
    .
  2. Click the
    Import/Export
    button.
    The Import/Export Users window appears
    .
     
  3. Click Download Sample File, and save the file.
  4. Create a CSV file from the downloaded template.
    CSV Format
    • Do not change the heading (first) row text.
    • Password field indicates a single-use password that must be changed upon first login following database update.
    • New User records:
      • Not all fields are required. Required fields include: Username, Firstname, Lastname, Password, Email
      • For any fields not used: Preserve all headings on the first row, but leave cells below blank.
    • Updates to existing User records:
      • Current passwords can be maintained by providing an empty string. 
      • Each User Group is represented by a line record with Type="user group".
      • User Group records should be at the top of the file, ahead of all User records.
      • User membership in a User Group is indicated in the Group Membership column.
      • As it is for individual Users, an Authentication option can be applied to a User Group:
        Each User logs in by selecting the relevant option from the dropdown box on the login page.
        To have RSA present in the list of Authentication Types, the relevant RSA SecurID server must first be configured.
  5. In the 
    Import/Export Users
    window, click
    Choose File
    to select the file, and click
    Import Users
    .
    The content of the file is added to the existing User database. The new content does not replace the current database.
  6. Navigate to
    Users
    ,
    Manage Users
    , and confirm that the import was successful by inspecting the User list.
Export Users
This button creates a CSV file of all Local, RADIUS, SecurID, and Smartcard/PKI users. For Local users, the
Password
field is masked.