Following are the steps to perform the user management functions:
The Auth Mechanism column displays the type of authentication mechanism for the user. It includes default, LDAP, and SAML.
Following are the steps to add a user:
Field | Description | Details |
---|---|---|
Name | Required name for the user. | Provide an alphanumeric name for the user. |
Email ID | Email ID name of the user. | Provide the email ID of the user in the following syntax: abc@emailID.com. |
Password | Password used by the user. | Provide the user password. |
Roles | Assigns roles to the user | You can assign multiple roles to the user at the time of user creation. For more information regarding the roles, refer to User Roles |
Accessible Domains | Provides access to multiple domains | You can provide user access to multiple domains at the time of user creation. |
For LDAP authentication, enter the following details:
Search On: Option to search user in Active Directory (AD) based on the email attribute or login attribute.
Search List: Comma or newline separated list of users to be added from AD.
Click Save. The user details will be searched on AD and added to the user collection. While adding user, the roles will be automatically assigned. If any user is already available in the Infoworks user collection, the user will be ignored.
JIT provisioning is available for LDAP or SAML authentication mechanisms. Every time, a new user accesses Infoworks application, the user credentials are authenticated against the IdP, and if the user is valid, the user is added in Infoworks application and the roles are assigned as per the configuration. However, the admin must manually assign the domains to the user.
Following are the steps to edit a user:
The following table describes the user roles.
User Role | Description |
---|---|
System admin | System administrators are responsible for: · Managing the entire Infoworks deployment · Managing the integration of Infoworks product into the customer environment. Their privileges include: · User management · Workload management · Integration into customer environment (data environment, network, LDAP, etc) · Security and access control integration A named user can be assigned the role of ‘System admin’ at the time of installation. This role assignment for a given user can be modified or additional named users can be attached to this role by the System admin. |
Database admin | The “database admin” role provides Infoworks users with the ability to manage and schedule data source ingestion tasks in the Infoworks product. A named user can be assigned the role of “database admin” by a user who has System admin role privileges. This role assignment for a user can be modified or additional named users can be attached to this role by the System admin. |
Data modeller | A data modeller can design, build and manage transformation logic, data models, cubes and design end-to-end workload orchestration using the Infoworks product. This role gives the user privileges to orchestrate the entire end to end data flow from metadata crawl and data ingestion to the building of data models and cubes. A named user can be assigned the role of a ‘Data modeler’ by the System admin. This role assignment for a given user can be modified or additional named users can be attached to this role by the System admin. |
Data analyst | A data analyst can design, build and manage transformation logic, data models, cubes and design end-to-end workload orchestration using the Infoworks. This role provides user the privilege to orchestrate the entire end to end data flow from metadata crawl and data ingestion to building data models and cubes. A named user can be assigned the role of a ‘Data analyst’ by the System admin. This role assignment for a given user can be modified or additional named users can be attached to this role by the System admin. |
Operations Analyst | Enterprises have a separate role for an operations analyst who monitors and manages production data management tasks/jobs. An Operations Analyst is responsible for reviewing dashboard, reviewing and downloading all logs, starting/stopping/restarting jobs, starting/stopping/restarting pipelines & workflows, and restarting clusters. |
NOTE: You can click the Disable Login button to revoke the user. The jobs scheduled by the disabled users get disabled in Infoworks.
In the Users page, click the Sync Users button. The modified user details will be synchronized and a success message will be displayed.
NOTES: This option is available only for LDAP authentication. The sync will be performed for all the users added either via AD or Infoworks.
Disabling Invalid Users
On clicking the Sync Users button, login will be disabled for the user records for which user details or valid roles are not available.
To re-enable the users, perform the following:
The jobs scheduled by the disabled users will also be disabled.
User login will be disabled in the following cases:
The user cannot be deleted from Infoworks UI. The users can only be disabled. Disabling user in Infoworks, does not disable a user in IdP.
Perform the following to change the Infoworks User Interface password: