users

The security module of SuperMap Service Manager protects GIS service security through role-based access control, where the "User Management" page is used to view and manage all users in the current GIS system, including administrator accounts created when accessing the SuperMap server for the first time. The SuperMap GIS system has built-in storage for all users, and administrators can add, modify, and delete users on this page.

Operations on the user can be done in the users tab of the security module after logging in to the service manager.

add user

To add a new user to the stored user list:

1. Click Add User, and in the add user dialog, enter the following information:

• User name [required parameter] is the unique identification of the user and cannot be the same as other user names
• Password [required parameter], enter twice for confirmation, and the following requirements shall be met:

• The length should be at least 8 characters and include at least three of uppercase letters, lowercase letters, numbers, and special characters;
• Cannot contain three or more identical or consecutive characters or numbers;
• According to the keyboard array, it cannot contain three or more consecutive characters arranged horizontally;

• User type [only iPortal has this setting]: iPortal user type is divided into creator and viewer, and the creator user can be associated with any role in iPortal. The viewer user can only be associated with PORTAL_VIEWER or a custom role with lower privileges than PORTAL_VIEWER, and the viewer user does not occupy number of users licensed for iPortal.
• User description: brief description of the user

2. In the  User group to be selected, the user can specify or not specify the user group as needed. The current user has the role of all the specified user groups
3. Associate the user with one or more roles by selecting the role in the Role to be selected
4. Click OK to add this user

 Note:

1) In iPortal, "set user role" can be selected the built-in roles such as PORTAL_VIEWER role, PORTAL_USER role, and DATA_CENTER, or roles defined by the administrator. See Role Management for details.

2) The verification rules of user name and password can be customized according to actual needs. Please refer to Compliance Verification Rules for Extended Account Information for details.

Bulk add user (iPortal)

iPortal supports batch add user by uploading CSV files with user information recorded. Click Add User and select From a file on the left to batch add users:

1. Download the file template. iPortal provides a CSV file template, which contains header fields and a user sample. You can add and edit users based on the template. Click Download template to download it. The CSV file format specification is as follows:

   field name	meaning	description
   UserName	user name	The format is: 1.4-18 characters, starting with a letter, followed by a letter, number, underline, or dash  2.Or email format
   Password	Password	The format is： 1.At least 8 characters, including at least three of English uppercase, lowercase, numeric, and special characters 2.Cannot contain three or more identical or consecutive characters or numbers 3.According to the keyboard array, it cannot contain three or more consecutive characters arranged horizontally
   Type	customer type	Including CREATOR and VIEWER
   Role	role	It needs to be an existing role in iPortal. Support assigning multiple roles to a user, separated by "|"/td>
   Email	Email address	Email standard format

2. Upload the file and view it. After editing the CSV file and saving it, click Select File to select the CSV to upload file, and then click Upload to view the list of user information to be added.
3. Edit user information. For the user whose information does not conform to the specification, iPortal will identify it and modify it before continuing to add user. In addition, you can edit the information for all users again, or delete one of them.
4. add user. Click the Add button to add users in batches.

Edit the user

The modify user attribute or the role to which it belongs:

1. Find the user to be modified and click the user name to enter the Modify user page to modify the required information, such as the user's password and description, but can not modify the user name. In addition, the iPortal administrator can modify the user type.
2. If you want to set the expiration time of the current user account, you can specify the expiration time of the user account in Expiration time as required. The expired account will not be able to log in and use.
3.  To change the user group to which the current user belongs, click the user group in the Selected user group list, then click the remove button to cancel the associated user group, and click the user group in User group to be selected. Then click the add button to add the desired user group
4. If you need to change the role associated with the current user, click the role in the "selected roles" list, and then click the Remove button to cancel the role association. Click the role in Role to be selected. Then click the Add button to add the required roles
5. Click Modify

lock user

The administrator can lock a user manually, and the locked user will not be able to log in and use.

The administrator can click the Normal status of the user and click "Yes" in the pop-up lock user dialog box to lock the user.

unlock user

If the status of a user is locked, the administrator must unlock the user to continue to use the account.

The administrator can click the locked status of the user and click Yes in the pop-up Unlock user dialog box to unlock the user.

delete user

Delete unwanted users. If you want to keep a user's resources in the portal, you can migrate the resources to another user before deleting them.

Note: The resources of one or more users can be migrated to other users, but the migration of resources by multiple users does not support viewing details.

Delete user and migrate the resource to another user:

1. You need to be an administrator or have a custom role that includes users, resource management, group management, and key management
2. Find the user to be deleted and check it. Multiple selections are supported
3. Click the Delete User button. In the pop-up dialog box, select Migrate the resource to another user.
4. Click View Detail to view the resources (map/service/scene/data/insight/large screen/project/GPA model/Notebook/3D design), group and key created by the user
5. Receiver [required parameter], select the creator type user existing in the portal, and support fuzzy search

• If the receiver's quota is insufficient, it is necessary to update the quota before migrating the resource

6. Click the OK button to complete the migration of resources and delete user

The receiver can log in the portal homepage and view the migration resources under Resource Center-> My Resources, Groups-> My Groups, Personal Center-> My Key.

Delete user and delete the resource:

1. Find the user to be deleted and check it. Multiple selections are supported
2. Click the delete user button. In the pop-up dialog box, select delete the resource.
3. Click OK to finish deleting the resource and delete user

After the user is deleted, the corresponding relationship with the role is released.

Note that the system administrator of SuperMap created when GIS system is initialized cannot be deleted.

Update Quotas (iPortal)

Update the data capacity

By default, SuperMap iPortal sets the maximum data capacity that each user is allowed to upload as 2048MB. According to the actual business requirements, the administrator can also configure the data capacity limit for the user:

1. Find the user who needs to update the data capacity and check it. Multiple selections are supported.
2. Click the Update Data Capacity button, and in the pop-up dialog box, enter the positive integer of the maximum data capacity allocated to the user, in MB
3. Click the OK button to complete the update of data capacity

 Note : PORTAL_VIEWER is not supported. The role updates the data capacity. For details, please refer to upload data capacity configuration.

Update service publishing quantity

By default, SuperMap iPortal does not limit the number of service publishing for each user. According to the actual business requirements, the administrator can also set a quota for the number of service publishing for each user:

1. Find the user who needs to update the service publishing quantity and check it. Multiple choices are supported
2. Click on Update Quota->Update Service Release Quantity button, and in the pop-up dialog box, enter the maximum service release quantity assigned to the user, which should be an integer
3. Click OK to complete the update of the service publishing quantity

 Note :

1. PORTAL_VIEWER role update quotas is not supported.
2. You can do this in the iportal.xml config file under the folder [SuperMap iPortal installation directory]\webapps\iportal\WEB-INF, the quota of the service publishing quantity is uniformly set through the < resourceQuota > sub-node element of the < defaultUserResourceQuotas > node element. For details, see: iPortal Config file description.

Update the number of WebApps results saved

By default, SuperMap iPortal does not limit the number of WebApps results saved for each user. According to the actual business requirements, the administrator can also set the number of WebApps results saved for each user WebApps Outcomes Quantity Quota:

1. Find the user who needs to update the saved quantity of WebApps results and check it. Multiple selections are supported.
2. Click the Update Quota->Update WebApps Result Quantity button. In the pop-up dialog box, there are different types of Set the maximum saved quantity of WebApps results (map, large screen, insight, Notebook), which should be an integer
3. Click the OK button to complete the update of the saved number of WebApps results

 Note : PORTAL_VIEWER is not supported. Number of role update WebApps results saved.