==============
User accounts
==============


SD-WAN supports separate user accounts for each person or
external app using the management application.

Listing users
--------------

To view the list of users, click the gear icon in the navigation menu,
then click Users.

|image0|

The list of users is shown. Click a user's email address to see details
about the user.

Adding a user
--------------

To add a user, browse to the list page, then click the "Add user"
button. This opens the form for creating a user. Complete the form on
the User tab and click "Save". When creating a new user, only the main
tab is shown. After saving the group, the other tabs are shown.

Viewing or updating a user
---------------------------

To view or update a user, navigate to the list page and click the name
of the user or the |image1| button beside its name. This opens the
user page with these tabs:

-  User: details about the user and their assigned space
-  Groups: list of groups to which the user is assigned

User fields
------------

Email
++++++

The user's email address. This must be unique in the database.

Username
+++++++++

.. warning::
    The username field was deprecated in SD-WAN 2015.4. Users can
    be assigned usernames and use them for authentication, but this will be
    removed in a future release.

An optional username. If this is provided, it must be unique in the
database.

First name
+++++++++++

The user's first name.

Last name
++++++++++

The user's last name.

Role
+++++

Select the most appropriate description for the user. This is used to
help categorize users.

Active
+++++++

If checked, the user can log in to the application and access the API.
If unchecked, the user cannot use the application or API.

Home Space
+++++++++++

The space selection restricts the user to view and manage objects only
within that space and descendants of that space.

Groups
+++++++

The groups control is shown on the Groups tab when editing an existing
user. To add a user to a group, click the group name in the "Available
groups" list and then click the |image2| button to add the group to the
"Chosen groups" list. To remove a group, click the name in the "Chosen
groups" list, then click the |image3| button to remove the group from
the list. Then click Save.

You cannot add or remove a group that has a permission you don't have.

Making an account inactive
---------------------------

To prevent a user from using the management application, user accounts
can be deactivated. To deactivate an account, uncheck the user's Active
field and save the account.

User accounts cannot be deleted because this would remove important
auditing information from historical records.


.. |image0| image:: /attachments/1638847/11667671.png
.. |image1| image:: /attachments/11667020/11667643.png
.. |image2| image:: /attachments/11667091/11667663.png
.. |image3| image:: /attachments/11667091/11667664.png
