Enterprise Administration Guide › Administering CA Access Control Enterprise Management › Users, Groups, and Administrative Roles › Create a User

Create a User

Users perform tasks in CA Access Control Enterprise Management. You create a user with the System Manager role when you install CA Access Control Enterprise Management. Create additional users when you start CA Access Control Enterprise Management to enforce separation of duties.

Note: If you use Active Directory as your user store, you cannot create a user in CA Access Control Enterprise Management.

To create a user

1. In CA Access Control Enterprise Management, click Users and Groups.

   The Create User task appears in the list of available tasks.

2. Click Create User.

   The Create User: Select User window appears.

3. (Optional) Select an existing user to create the new user as a copy of it, as follows:
   1. Select Create a copy of a user.
   2. Select an attribute for the search, type in the filter value, and click Search.

      A list of users that match the filter criteria appears.

   3. Select the object you want to use as a basis for the new user.
4. Click OK.

   The Create User task page appears. If you created a user from an existing object, the dialog fields are pre-populated with the values from the existing object.

5. Complete the fields in the Profile tab. The following fields are not self-explanatory:

   User ID

   Defines the string that identifies the user to CA Access Control Enterprise Management. This is the name the user used to log in.

   Password Must Change

   Specifies to force the user to change the password on first login.

   Enabled

   Specifies whether the user can log in to CA Access Control Enterprise Management.

6. (Optional) Click the Admin Roles tab to assign admin roles to the user, as follows:
   1. Click Add an admin role.

      The Select Admin Roles section appears.

   2. Type a filter value and Click Search.

      A list of roles that match the filter criteria appears.

   3. Select the admin roles that you want to assign to the user, and click Select.

   The admin roles are assigned to the user.

7. (Optional) Click the Privileged Access Roles tab to assign privileged access roles to the user, as follows:
   1. Click Add a privileged access role.

      The Select Privileged Access Roles section appears.

   2. Type a filter value and Click Search.

      A list of roles that match the filter criteria appears.

   3. Select the privileged access roles that you want to assign to the user, and click Select.

   The privileged access roles are assigned to the user.

8. (Optional) Click the Groups tab to add the user to groups, as follows:
   1. Click Add a group.

      The Select Group section appears.

   2. Type a filter value and Click Search.

      A list of groups that match the filter criteria appears.

   3. Select the groups that you want to assign to the user, and click Select.

   The user is added to the groups.

9. Click Submit.

   The user is created.