Create and manage users

The Users page displays all users known to the CloudBees CD/RO server, including users defined locally within the server and those defined in external repositories such as LDAP, Active Directory, or SSO.

View the user list

To view the list of users, from the CloudBees CD/RO main menu, navigate to Administration Users.

The following is a description of the fields at the top of the users list.

Field Name

Description

Find…

(Optional) Enter a name or email address to filter the list of users.

Maximum results

Maximum number of results to return. The default is 100.

CloudBees CD/RO has no upward limit, but if you select 500 or higher, you might overload your browser and that can cause performance degradation or more serious issues.

Include Unregistered Users

If this option is selected, all directory provider users are returned, including those not registered in CloudBees CD/RO. Use this to request external LDAP or Active Directory providers.
If not selected, only users registered in CloudBees CD/RO are returned.

The following are column descriptions for the Users page.

Column Name

Description

Name

Name or email address of the user. The name is the unique identifier for this user local to the CloudBees CD/RO server. This could be LDAP, Active Directory, OpenID Connect, or SAML.

Repository

Repository containing the user. This is usually LDAP or Active Directory.

Local refers to local to the CloudBees CD/RO server. Other names in this column refer to defined directory providers.

Real name

User’s given name.

User’s email address as known within the system.

Last login time

Date and time of the user’s last sign in.

Groups

Groups that include this user.

Selecting a group name displays the Group Details page that lists all members in that group.

Parent groups

Parent groups displays for remote or external users if the repository (directory provider) to which the user belongs is configured to Recursively Traverse Group Hierarchy when the directory provider was defined.

This field displays the groups in the LDAP or Active Directory server hierarchy in which the user’s immediate groups are members. For example, if:

The user belongs to the SFO group
The SFO group belongs to the California group
The California group belongs to the US group

Then the Parent Groups field for the user displays California, US, and the Groups field displays SFO.

Accessed on last login

The repository the user last accessed.

Actions

Actions you can perform on the user, including:

Details: Opens the Edit User pop-up screen. For more information, refer to Create or edit a user.
DSL Export: Opens the Export DSL screen to specify DSL options. Select Export to download the user details in the specified DSL format.
DSL Editor: Opens the DSL Editor pop-up screen to edit user details.
Access Tokens: This displays a list of tokens assigned to the user.
- To add an access token:
  1. Complete the following fields on the New access token screen.
    
    Name: (Required) Enter a name for the token.
    
    Description: Enter a description of the token.
    
    Expiration days: Enter the number of days available before expiration.
  2. Select Save changes when done.
  3. Copy the access token displayed for use.
    
    Once created, the token is displayed in the list.
- To edit a token, select the Edit option from the Actions menu for the desired token.
- To delete a token, either:
  1. Select the checkbox next to the desired token, and then select Delete access tokens.
  2. Select the Delete option from the Actions menu for the desired token.
Properties: Opens the Properties screen. Properties are the objects related to the user. The following options are available:
- Select the + icon to add a property to the object and complete the fields shown:
  - Property name: Name for the property.
  - Expandable: If selected, expansion can reference this property in other properties.
  - Place into…: Select the directory (property sheet) to contain the property.
  - Description: Description of the property.
  - Value: Declare a value for the property.
- Select the icon to add a directory and select the directory for the property.
  - Directory: Enter the name for the directory to be added.
  - Place into…: Select the directory (property sheet) to contain the property.
    
    For more information about properties, refer to Properties.
Access control: Displays the privileges assigned to the user and view inherited privileges. To add a privilege:
- Select the + icon.
- Complete the Type field and indicate the permission level (inherit, allow, or deny) for each category (read, modify, execute, and change permissions).
Change History: Displays the change history associated with the user.
Delete: Deletes the user.

View external users

While you can view external user content, you must go to the LDAP or Active Directory repository to edit external user information. However, you may associate properties with external users and then use those properties in CloudBees CD/RO.

To configure your existing LDAP and Active Directory account repositories to communicate with CloudBees CD/RO, navigate to Administration Configurations Directory providers.

Add registered users

Active Directory and LDAP users can add registered users.

To add a registered user:

Select Register user.
Complete the fields to register the user.
Select OK.

Once registration is complete, the Custom user properties section and Access Control links appear.

Modify user properties or assign custom user properties

Registered users can modify user properties or assign custom user properties.

To modify user properties or assign custom user properties, either:
- Select the Create Property link.
- Select the Create Nested Sheet link.
- Select the Access Control link.
Complete the fields to modify the desired properties.
Select OK.

Create or edit a user

CloudBees CD/RO supports two types of user accounts:

External users that are defined in an LDAP or Active Directory system.
Local users defined in this CloudBees CD/RO server. Local users are not visible outside of CloudBees CD/RO.

CloudBees recommends using external accounts whenever available; however, local users are created if there is no shared directory service or when a special account is needed for CloudBees CD/RO only.

Create or edit a local user

Navigate to Administration Users.
- To create a new user, select Add user.
- To edit an existing user, select the Actions menu for the user, and then select Details.

Complete or update the following fields on the New User or Edit User pop-up screen.

Field Name	Description
User Name	Name of the user account to be used for sign in.
Real Name	User’s real (given) name.
Email	User’s email address.
Groups	List of groups to which this user will belong; enter one group per line.
Personas	List of personas that apply to this user; enter one persona per line.
Password	User’s new temporary password.
Retype Password	Re-enter the new password.

Field Name

Description

User Name

Name of the user account to be used for sign in.

Real Name

User’s real (given) name.

User’s email address.

Groups

List of groups to which this user will belong; enter one group per line.

Personas

List of personas that apply to this user; enter one persona per line.

Password

User’s new temporary password.

Retype Password

Re-enter the new password.

Select OK when done.

Delete a user

There are two ways to delete an existing user.

Navigate to Administration Users.
Do one of the following:
- To delete a single user or multiple users:
  - Select the checkbox next to the desired user(s).
  - Select Delete user at the bottom of the page.
- To delete a specific user;
  - Select the Actions menu for the user to be deleted, and then select Delete.