Skip to main content
Users live in the Authorization area of Lerian Console, next to Roles, Groups, and Permissions. Open Authorization from the gear menu in the top bar, or from the Authorization card on the Console home page. Authorization is its own area, not a Settings section. Roles and permissions control what each user can do. The area needs Access Manager and the read permission on users. Without that permission, the Console shows a not-authorized page instead of the list. In multi-tenant deployments, the list shows only the users of the logged-in administrator’s tenant. Console does not expose users from other tenants.

​
The Users page

The table has six columns: You choose which columns the table shows. The list paginates, and the footer gives the range on screen and the total. The row menu holds three items: View Access, Edit, and Delete. The Console shows Edit only to an account with the update permission on users. It shows Delete only to an account with the delete permission on users.

​
Create a user

1

Open the form

Click New User. The form opens on the right side of the screen.
2

Fill in the fields

The form asks for Name, Last Name, Username, E-mail, Password, Confirm Password, and Role.
3

Save

Click Save. This step needs the create permission on users. The new user appears in the list.
The Console applies these rules:
  • Name, Last Name, and Username hold at least 3 characters.
  • Username accepts letters, numbers, hyphens, and underscores.
  • E-mail holds a valid address.
  • Password holds at least 12 characters, with one uppercase letter, one lowercase letter, one number, and one special character.
  • Password rejects two identical characters next to each other, so aa and 11 both fail.
  • Role accepts one or more groups. At least one is required.
The Console checks these rules before it submits the form. The identity backend can apply further rules.

​
Edit a user

1

Open the row menu

Find the user, open the menu in the Actions column, and select Edit.
2

Change the fields

The panel has two tabs: Personal Information and Password. On the Personal Information tab you change the Name, the Last Name, the E-mail, and the Role. The tab holds no username field, so a user keeps the username they got at creation.
3

Save

Click Save.

​
Reset a user’s password

1

Open the Password tab

Select Edit in the row menu, then open the Password tab.
2

Type the new password

Fill in New Password and Confirm Password. The new password follows the rules in Create a user.
3

Save and confirm

Click Save. A dialog titled “Password Change” opens. Click Yes, change password.
This is an administrator reset. It asks for no current password and sets no temporary password. The user signs in with the new one next time.
To change your own password or manage your own multi-factor authentication, use Settings › Security when your deployment enables it.

​
Delete a user

Deleting a user permanently removes the account. This action cannot be undone.
Find the user, open the menu in the Actions column, and select Delete. A dialog titled “Confirm Deletion” states: “You are about to permanently delete this user. This action cannot be undone. Do you wish to continue?” The Console then answers with the message “User successfully deleted”. The Console does not offer Delete on your own account.

​
Roles, groups, and permissions

The Authorization area has four screens: Users, Roles, Groups, and Permissions. A permission names a resource and an action. It can be granted to a user directly, to a group, or to a role. A group can belong to a parent group, and a role can include other roles. View Access in the row menu opens a page for one user. That page has six tabs: Effective Access, Roles, Groups, Direct Permissions, Profile, and Security.