Editing a user in Metasys UI - Metasys - LIT-1201528 - General System Information - Metasys System - 12.0

Security Administrator System Technical Bulletin
Product
Building Automation Systems > Building Automation Systems > Metasys System
Document type
Technical Bulletin
Document number
LIT-1201528
Version
12.0
Revision date
2022-08-05
  1. Open the User menu.
  2. Tap or click Administrative Tasks > User Management.
  3. In the default tab (Users), tap or click the Edit User icon in the Actions column. The edit user window opens.

You can edit the user details in the User Details (default) tab as follows::

Figure 1. User Details tab
  • Click or tap fields to type and edit the name and contact details. Active Directory users cannot edit those fields. Username is a mandatory field.
  • Tap or click the toggles to change the settings listed under Actions.
    Note: Unlock Account is only available when the user is locked out of their account.
  • Local Metasys users can set the password length, edit the password, and confirm the new password. Tap or click on the information icon beside New Password to view the current password policy. The minimum password length is eight characters. The maximum password length is 50 characters. By default the password length fields are empty.
  • Edit user access details.
    Note: When you select Single Access User, the other check boxes are disabled. When you select Temporary User, use the date field with the calendar icon to set an expiration date. These fields are named Single Access Active Directory User and Temporary Active Directory User for Active Directory users.
  • Edit the role by selecting a role from the Role list. For example, you can select Administrator, Maintenance, Operator, or User. You can select multiple options. Role is a mandatory user detail.
  • Edit the System Privileges by selecting privileges from the System Privileges drop down list. For more information, see System Access Privileges.
  • Tap or click SAVE to save your settings and exit the User Details tab, or tap or click CANCEL to exit the tab without saving your changes.

Category permissions apply to both SMP and Metasys UI regardless of the user interface you use to assign the permissions.

You can edit the account settings in the Account Settings tab.

Figure 2. Account Settings tab
  • In the Inactive Sessions section, choose your session timeout and termination preferences.
  • In the Account Lockout section, local Metasys users can choose not to have any account lockout, or choose to activate account lockout. Account lockout occurs after a given number of sequential invalid logon attempts in a certain time range. Active Directory users can change these settings in Active Directory.
  • In the Dormant Account section, choose not to check user account for dormancy, or enter a number of days after which an account is made dormant. You can also choose to create a dormant user account event and to lock out the user account when dormant.
  • You can edit the password settings for local Metasys users. In the Maximum Password Age section, choose to have no expiration for passwords, or enter a number of days after which a password expires. In the Password History section, choose not to keep the password history, or enter a number of passwords for the system to remember. For Active Directory users these fields are viewed and controlled in Active Directory.
  • Tap or click SAVE to save your settings and exit the Account Settings tab, or tap or click CANCEL to exit the tab without saving your changes.

You can edit the permitted access times of a user in the Timesheet tab.

Figure 3. Timesheet tab

A time slot during which the user can access the system is appears in blue with a white check mark. A time slot during which access is denied appears yellow with an x. In the sample figure above, you can see that access is denied on Saturdays and Sundays, but allowed during the rest of the week.

  1. To change the selection, tap or click on the desired time slot. You can use the arrow to drag your selection vertically to expand the access time slots.
  2. Tap or click SAVE to save your settings and exit the Timesheet tab, or tap or click CANCEL to exit the tab without saving your changes.

You can edit the category access details in the Category Access tab.

Figure 4. Category Access tab

The categories are listed vertically on the left. The permissions are listed horizontally at the top of the table. Tap or click the information icon to learn more about the permissions, or see the Available permissions table in the User Management section in the Metasys UI Help (LIT-12011953) . The following table describes the Category Access icons in more detail:

Table 1. User Category Access icons
Icon Name Description
Access from Roles & User Appears only in the No Access column. This setting means that the "No Access" setting does not apply to this user. The user has at least one role assigned that is providing a permission for this category.
Permission from a Role Denotes that the permission comes from one or more role(s) assigned to this user.
User permission Denotes that the permission is assigned directly to this user.
No access to category Appears only in the No Access column. This setting means that every role assigned to the user has No Access for this category, and the user has no permissions overriding the role(s) setting.
Overridden Appears only in the No Access column. This setting means that every role assigned to the user has No Access for this category, and the user has at least one permission overriding the role(s) setting.