Skip to main content
Users live in the Authorization area of Lerian Console, next to Roles, Groups, and Permissions. Open Authorization from the Authorization entry in the Settings sidebar, or from the gear menu in the top bar. Roles and permissions control what each user can do. The Users page needs Access Manager and the read permission on users. Without that permission, the Console shows a not-authorized page instead of the list. On Lerian Cloud, the list shows only the users of the logged-in administrator’s tenant. Console does not expose users from other tenants.

​
The Users page

The table has six columns: You choose which columns the table shows. The list paginates, and the footer gives the range on screen and the total. The row menu holds three items: View Details, Edit, and Delete. The Console shows Edit only to an account with the update permission on users. It shows Delete only to an account with the delete permission on users.

​
Create a user

1

Open the form

Click New User. The form opens on the right side of the screen.
2

Fill in the fields

The form asks for Name, Last Name, Username, E-mail, Password, Confirm Password, and Groups.
3

Save

Click Save. This step needs the create permission on users. The new user appears in the list.
The Console applies these rules:
  • Name and Last Name are required, and Username holds at least 3 characters.
  • Username accepts letters, numbers, hyphens, and underscores.
  • E-mail holds a valid address.
  • Password holds at least 12 characters, with one uppercase letter, one lowercase letter, one number, and one special character.
  • Password rejects two identical characters next to each other, so aa and 11 both fail.
  • Groups accepts one or more groups. At least one is required.
The Console checks these rules before it submits the form. The identity backend can apply further rules.

​
Edit a user

1

Open the row menu

Find the user, open the menu in the Actions column, and select Edit.
2

Change the fields

The panel has two tabs: Personal Information and Password. On the Personal Information tab you change the Name, the Last Name, the E-mail, and the Groups. The tab holds no username field, so a user keeps the username they got at creation.
3

Save

Click Save.

​
Reset a user’s password

1

Open the Password tab

Select Edit in the row menu, then open the Password tab.
2

Type the new password

Fill in New Password and Confirm Password. The new password follows the rules in Create a user.
3

Save and confirm

Click Save. A dialog titled “Password Change” opens. Click Yes, change password.
This is an administrator reset. It asks for no current password and sets no temporary password. The user signs in with the new one next time.
To manage your own multi-factor authentication, use Settings › Security. To reset your own password, use Forgot my password? on the sign-in page. The link appears when the deployment sets ENABLE_FORGOT_PASSWORD to true.

​
Delete a user

Deleting a user permanently removes the account. This action cannot be undone.
Find the user, open the menu in the Actions column, and select Delete. A dialog titled “Confirm Deletion” states: “You are about to permanently delete this user. This action cannot be undone. Do you wish to continue?” The Console then answers with the message “User successfully deleted”. The Console does not offer Delete on your own account.

​
Roles, groups, and permissions

The Authorization sidebar has five entries: Overview, Users, Roles, Groups, and Permissions. A permission names a resource and an action. You grant it to a role, or directly to a user. A user gets a role directly or through a group. View Details in the row menu opens a page for one user. That page has six tabs: Effective Access, Roles, Groups, Direct Permissions, Profile, and Security.