Manage Launchpad Users

Launchpad lets you create users and assign permissions to them on various Launchpad services in the cloud, including Launchpad. Each user is assigned a profile defining permissions granted to the user to perform various actions in the respective Launchpad services. A profile is a canned set of permissions that defines the actions a user can perform in the context of Launchpad. The primary objects in Launchpad are as follows.

• Users: The Launchpad user accounts to log in to Launchpad and access various services and tools.
• Devices: The AP/sensor deployed at a location and assigned to a Wireless Manager service that a user has access to.
• Services: The Launchpad services and tools-Launchpad, Wireless Manager, Guest Manager and AristaPackets.

Profiles

Launchpad provides the following system-defined profiles.

• Admin: The Admin profile has the highest privileges on the current and future services. A user with the Admin profile can manage users, register devices and manage settings in Launchpad.  The user is also assigned the highest permission, that is the top-most role, in the other Launchpad services and tools available to him. The individual permissions or role assigned for each service to a user cannot be modified.

• Custom: This is the default profile assigned to a new user. The Custom profile does not have any permission defined in it. That is to say, for a user with Custom profile, the permission on each service for the user must be explicitly set. Therefore, different users with the Custom profile could have different permissions a different set of permissions on the services.  For example, one user with a Custom profile can be an administrator on Wireless Manager and a guestbook operator on Guest Manager. Another user with a Custom profile can be a viewer on Wireless Manager and an analyst on Guest Manager.

The following table explains the privileges on Launchpad services for a new user based on the profile assigned to the user.

You must have User Management privileges in Launchpad to add, edit, delete user, that is, user account information.

The changes that a user can make to another user or a key depend on the profile of the logged in user and that of the user or key being edited. The following table details the actions that can be performed by a logged in user on another user/key.

Apart from the system-defined profiles described above, Launchpad facilitates the creation of user-defined profiles. For more information on user-defined profiles, refer to Manage User-defined Profiles.

Users can be categorized based on the mode of authentication. Local users are users that are authenticated locally in Launchpad. Federated users are users that authenticate using third-party identity providers to log in to Launchpad services through Launchpad.

Add User

 When you add a user, you first define the account information for the user. The user is assigned the Custom profile, by default. After saving the user account information, you must explicitly assign service privileges to the user.

There are two types of users, local users and federated users.

Launchpad authenticates a local user by means of a user-name password combination. A local user can be authenticated with two-factor authentication if two-factor authentication has been enabled for the customer to which the user belongs. Refer to Manage Two-Factor Authentication for details on enabling two-factor authentication.

A user that is authenticated by a third-party identity provider is called a federated user.

All users are local users when federated authentication is not available to your organization. If federated authentication has been activated and enabled for your organization, you must select a user type when you add a user.

A federated user is added automatically when he or she authenticates successfully with the third-party identity provider and signs in to Launchpad. If there is a change in the user details from the federated identity provider, the record for this user in Launchpad is overwritten when the user signs in. If the details of a federated user are modified in Launchpad, the changes coming from the federated identity provider are ignored. You can choose to override this behavior and overwrite a modified federated user record with the changes coming from the federated identity provider.

To add user account information, perform the following steps.

1. Log on to the Launchpad using your credentials.
2. Click Admin and then click the Users tab.
   A list of existing users appears.
3. Click New User to add a new user.
4. Enter the account information.

5. Click Save.

When a new user is added, a welcome email is sent to the user to set a password for his account. The user can click the link provided in this e-mail and set his password.

Note: The welcome email will be sent to the email Id mentioned in the Email field.

Assign Profile

Once a user has been added, you must assign a profile to him.

To assign profile to a user, perform the following steps.

1. Log on to the Launchpad using your credentials.
2. Click Admin and then click the Users tab.
   A list of existing users appears.
3. Right-click the required user row and click the Service Privileges option on the pop-up menu. Alternatively, you can click the user row and then click the Service Privileges tab.
   The Service Privileges screen appears.
4. Select the required profile.
5. Click Save.

Refer to the Manage Service Privileges for User section to know more about assigning service privileges to a user.

Note: If any changes are made to the profile assigned to a federated user in Launchpad, the changes coming from the federated identity provider are ignored. If you want reset this default behavior, you must select the Reset to Federated Profile check box on the Edit User page.

Change Profile

When you change the profile from Admin to Custom while assigning service privileges, all previous permissions for Launchpad services are retained until new rules have been defined for the Custom profile. If you change the profile from Custom to Admin, the user gets highest permissions on all Launchpad services.

Edit User

To edit user account information, you must have user management privileges.

You cannot edit the login ID of a user. All other fields are editable. If you edit the e-mail id of a user, a notification e-mail is sent to the old e-mail ID, and a confirmation e-mail is sent to the user's modified e-mail ID. The purpose of the confirmation e-mail is to seek confirmation for the modified e-mail ID. The user can confirm the modified e-mail ID by clicking the link provided in the confirmation e-mail.

Note: If you change an e-mail ID multiple times before it is confirmed by the user, the confirmation e-mail that has been sent to latest e-mail ID is considered valid. Even if the user clicks the links provided in the confirmation e-mail to an intermediate e-mail ID, it is ignored by Launchpad.

If the user has not received the confirmation e-mail, you can resend the e-mail to the modified e-mail ID by clicking the Resend email link seen below the Email field on the Edit user page. This link is visible only if the user has not confirmed the modified e-mail ID by clicking the link provided in the confirmation e-mail.

If you change the profile of a federated user, the profile provided by the federated identity provider is ignored. You can reset this behavior and accept the profile provided by the federated identity provider.

To edit user account information, perform the following steps.

1. Log on to the Launchpad using your credentials.

2. Click Admin and then click the Users tab. A list of existing users appears.

3. Click the user row to edit.

4. Modify the account information.

5. Click Save.

Changes to user account information reflect on subsequent login, that is, when the user logs out of and in to Launchpad.

Change Authentication Mode for User

A local user is a user that authenticates to Launchpad using Launchpad credentials. A federated user is a user that authenticates to Launchpad using his federated login credentials. It is possible to change the mode of authentication of a user at any time. Thus, a local user can become a federated user and vice versa.  

When a local user becomes a federated user, he or she is unable to use his Launchpad password to log in to Launchpad.

Lock/Unlock User

You might want to define users and keep them ready for use, but provide them access to Launchpad at a later point. Or, you might want to restrict access to Launchpad for users that are already active. You might also want to block some users instead of deleting them. In such cases, you can lock the users account to prevent them from accessing Launchpad.

You can unlock locked users at any time. When you lock a user, a padlock icon appears for this user indicating that the user account is locked.

To lock or unlock a user, perform the following steps.

1. Log on to the Launchpad using your credentials.

2. Click Admin and then click the Users tab.
   A list of existing users appears.

3. Right-click the user row you wish to lock or unlock.

4. Click the Lock/Unlock option on the pop-up menu.

Reset Password

You cannot modify the password for another user. However, you can reset a user's password if you have user management privileges.

When you reset a user's password, an e-mail is sent to the user to set a new password for his account. The user can click the link provided in the notification e-mail and set his new password.

To reset the password for a user, perform the following steps.

1. Log on to the Launchpad using your credentials.

2. Click Admin and then click the Users tab. A list of existing users appears.

3. Click the user row for the user whose password is to be reset.

4. Select the Reset Password check box to reset the user account.

5. Click Save.

An e-mail to set a new password is sent to the user's e-mail ID.

Search User

You can search for users based on login ID, name, email, last login or profile.

To search a user, perform the following steps.

1. Log on to the Launchpad using your credentials.

2. Click Admin and then click the Users tab.

3. Type the search keyword in the search users box at the top-right side.

A list of matching users appears as you type in the search keyword.

Delete User

You can delete both local users and federated users. When you delete a federated user, the record created for the federated user in Launchpad gets deleted. When the federated user logs in to Launchpad the next time, a fresh record for this user is created in Launchpad.

To delete user account information, perform the following steps.

1. Log on to the Launchpad using your credentials.

2. Click Admin and then click the Users tab. A list of existing users appears.

3. Right-click the user row to delete.

4. Click the Delete option from the pop-up menu that appears.
   A message prompting you to confirm the deletion appears.

5. Click Yes to permanently delete the user.

Note: If any problem occurs when deleting service-related data for the user in Launchpad, the user does not get deleted.

User Account Suspension Policy

In the Suspension Policy section under Admin>Settings, you can configure the duration for which a Launchpad user account must be suspended on consecutive login failures.

To configure this option, you must provide the following information: