Managing users

The security module of SuperMap Service Manager protects the security of GIS services through role-based access control. The "User Management" page is used to view and manage all users in the current GIS system, including the administrator account created when accessing the SuperMap server for the first time. The SuperMap GIS system has stored all user accounts, and the administrator can add, modify and delete users on this page.

Operations on users can be performed in the "User Management" tab of the security module after logging in to the service manager.

Add users

Add a new user into the stored user list:

1. Click "Add User" and enter the following information in the Add User dialog box:

• User name [Required parameter], which is the unique identifier of the user, cannot be repeated with other user names

• Password [Required parameter], input twice for confirmation, length of 6 to 18 characters, which contains at least any three of uppercase letters, lowercase letters, numbers, or special characters

• User type [only iPortal has this setting]: iPortal user types are divided into creators and viewers. The creator can be associated with any role in iPortal, and the viewer can only be associated with PORTAL_VIEWER or a custom role with lower authority than PORTAL_VIEWER. The viewer user does not occupy iPortal's user license.

• User description information: a brief description of the user

2. In the "selected user group" list, the administrator can specify the user group to which the user belongs, and then the user will associate with all roles of the specified user group
3. Select a role in the "selected roles" list to associate the user with one or more roles
4. Click "OK" to add the user.

Note: In iPortal, "Set User Role" can select PORTAL_VIEWER, PORTAL_USER, DATA_CENTER, and other built-in roles or roles defined by administrators. For details, please refer to Role Management.

Adding users in batch (iPortal)

iPortal supports adding users in batches by uploading a CSV file with user information. Click the "Add User" button, select "From a file" on the left to add users in batches:

1. Click the "Download Template" to download the user file template, which is a CSV file template, including header fields as shown in the following table. And then add and edit users based on the template.

   Field Name	Definition	Description
   UserName	the user name	The format is: 1. 4-18 characters, starting with a letter, followed by a letter, number, or underscore   2. or the email format
   Password	the user password	The format is: 6-18 characters, and contain at least three of English uppercase, lowercase, numbers, and special characters
   Type	the user type	Including two types: CREATOR and VIEWER
   Role	user roles	Assigning roles of iPortal to the user. You can assign more than one role to a user, separated by "|"
   Email	the user email address	Email standard format

2. Click "Select File" to select the CSV file for adding users, then click "Upload" to view the list of user information;
3. If there's any user field value in the file that does not conform to iPortal account rules, the user field will be displayed with a red box. You need to correct the user information before proceeding with the adding operation;。
4. Click the "Add Users" button to add users to iPortal.

Edit users

Modify user attributes or roles:

1. Find the user that needs to be modified, click the user name to enter the "modify user information" page. You can modify the information, such as password, description, but can not modify the user name. In addition, the iPortal administrator can also modify the user type.
2. To set the account expiration time of the current user, you can specify in the "Expiration Time" field. The expired account will not be able to log in and use.
3. If the associated user groups with the current user need to be changed, you can click the user groups in the "Selected user group" list and then click the Remove button to cancel the user group.  You can also click the user groups in the "User group for selection" and then click the Add button to add these.
4. If the associated roles with the current user need to be changed, you can click the roles in the "Selected Roles" list and click the Remove button to cancel the role association. You can also click the roles in the "Role for Selection" and then click the Add button to add these.
5. Click "Save".

Lock users

The administrator can manually lock a user, and the locked user will not be able to log in and use it.

The administrator can click the "normal" status of the user, and in the pop-up "lock user" dialog box, click "Yes" to lock the user.

Unlock users

The "locked" user needs to be unlocked by the administrator to use the account normally.

The administrator can click the "locked" status of the user, and in the pop-up "Unlock User" dialog box, click "Yes" to unlock the user.

Delete users

Delete unwanted user(s), If you want to keep a user's resources in the portal, you can migrate the resources to other users before deleting them.

Note: You can migrate the resources of one or more users to other users, but viewing details is not supported for multiple users migrating resources.

To delete users and migrate resources to other users:

1. You need to have the administrator identity or a custom role for both user management, resource management, group management and key management.
2. Find the user you want to delete, check the box, multiple selections are supported.
3. Click "Delete User" button, in the pop-up dialog box, select "Migrate resources to other users".
4. Click "View Details" to view the resources (Map/Service/Scene/Data/Insight/Dashboard/Project/GPA Model/Notebook/Design3D), groups and keys created by the user.
5. Recipient [Required], select a user of creator type that already exists in the portal.

• If the recipient quota is insufficient, you need to update the quota before migrating resources.

6. Click "OK" button to complete the migration of resources and delete users.

Recipient can login to the portal home page and view the migrated resources under Resource Center->My Resources, Groups->My Groups, and Personal Center->My Keys.

Delete users and remove resources:

1. Find the user you want to delete, check the box, multiple choices are supported.
2. Click "Delete User" button, in the pop-up dialog box, select "Delete Resource".
3. Click "OK" button to finish deleting resources and users.

After the user is deleted, the corresponding relationship between the user and the roles is released.

Note: the system administrator account created during the initialization of the SuperMap GIS system cannot be deleted.

Updating Quota (iPortal)

Update data capacity

By default, SuperMap iPortal has set the maximum data capacity allowed for each user to upload: 2048MB. According to actual business needs, the administrator can also configure the data capacity limit for users individually:

1. Check one or more users
2. Click the "Update Data Capacity" button; in the pop-up dialog box, enter the maximum data capacity allocated for the user, which must be an integer, unit: MB
3. Click the "OK" button to complete the update of the data capacity

Note: PORTAL_VIEWER role is not supported to update data capacity.

Update service publishing quantity

By default, the service publishing quantity of a user is not limited. According to your actual business needs, you can limit the quota for the number of service publishing for users individually as follows:

1. Check one or more users
2. Click Update quota > Update service publishing quantity button; in the pop-up dialog box, enter the maximum service publishing quantity, which must be an integer

Note:

1. The PORTAL_VIEWER role is not supported to update quotas.
2. In the iportal.xml configuration file under the [SuperMap iPortal installation directory]\webapps\iportal\WEB-INF folder, you can uniformly set the quota for the service publishing quantity through the subnode <resourceQuota> of the node <defaultUserResourceQuotas>. For details, please refer to the iPortal configuration file description.

Update the number of WebApps achievements

By default, users can create and save unlimited WebApps achievements. According to actual business needs, the administrator can also set the quota for users individually.

1. Check one or more users
2. Click "Update quota" > "Update the number of WebApps achievement"; in the pop-up dialog box, set the max quota for each type of WebApp, which must be an integer
3. Click the "OK" button to complete the update process

Note: The PORTAL_VIEWER role is not supported to update the number of WebApps achievements.