Manage Mojo Launchpad Users

Mojo Launchpad lets you create users and assign permissions to them on various Mojo Launchpad services in the cloud, including Mojo Launchpad. Each user is assigned a profile defining permissions granted to the user to perform various actions in the respective Mojo Launchpad services.

A profile is a canned set of permissions that defines the actions a user can perform in the context of Mojo Launchpad. The primary objects in Mojo Launchpad are as follows.

• Customers: Customers that have subscribed to Mojo Launchpad.

• Users: The Mojo Launchpad user accounts to log in to Mojo Launchpad and access various services and tools.

• Devices: The AP/sensor deployed at a location and assigned to a Mojo Wireless Manager service that a user has access to.

• Services: The Mojo Launchpad services and tools-Mojo Launchpad, Mojo Wireless Manager, Mojo Guest Manager and Mojo Packets.

Profiles

Mojo Launchpad provides the following system-defined profiles.

• Super Admin: The Super Admin profile has the highest privileges in Mojo Launchpad. This means that a user having the Super Admin profile can manage users, register devices, manage settings for all current and future customers. They have the highest profile on all services and can assign all types of service privileges to all current and future customers. The privileges for the Super Admin profile cannot be modified. The Super Admin profile can be assigned to an MSP user only.

• Global Customer Admin: The Global Customer Admin profile has the highest privileges with respect to all current and future services for all customers. A user with the Global Customer Admin profile can assign and revoke permissions on all current and future services for all customers. Customer management permissions for the Global Customer Admin profile cannot be modified. A user with Super Admin or Admin profile can edit device registration, settings and service permissions on his/her organization for a user with Global Customer Admin profile. The Global Customer Admin profile can be assigned to an MSP user only.

• Admin: The Admin profile has the highest privileges on the current and future services. A user with the Admin profile can manage users, register devices and manage settings in Mojo Launchpad.  The user is also assigned the highest permission, that is the top-most role, in the other Mojo Launchpad services and tools available to him. The individual permissions or role assigned for each service to a user cannot be modified. A user with Global Customer Admin or Super Admin profile can edit customer management permissions for a user with Admin profile. The Admin profile can be assigned to an MSP user and to a non-MSP user as well.

• Custom: This is the default profile assigned to a new user. The Custom profile does not have any permission defined in it. That is to say, for a user with Custom profile, the permission on each service for the user must be explicitly set. Therefore, different users with the Custom profile could have different permissions a different set of permissions on the services. The Custom profile can be assigned to an MSP user and a non-MSP user.  For example, one user with a Custom profile can be an administrator on Mojo Wireless Manager and a guestbook operator on Mojo Guest Manager. Another user with a Custom profile can be a viewer on Mojo Wireless Manager and an analyst on Mojo Guest Manager.

The following table explains the privileges on Mojo Launchpad services for a new user based on the profile assigned to the user.

Users can be either an MSP user and a non-MSP user. MSP users have customer management privileges. The privileges for a user depends on the profile assigned to him.

You must have User Management privileges in Mojo Launchpad to add, edit, delete user, that is, user account information.

The changes that a user can make to another user or a key depend on the profile of the logged in user and that of the user or key being edited. The following table details the actions that can be performed by a logged in user on another user/key.

Note: To edit permissions on common customer accounts, a user must have customer admin privileges on all customer accounts assigned to the user/key being edited.

Apart from the system-defined profiles described above, Mojo Launchpad facilitates the creation of user-defined profiles. For more information on user-defined profiles, refer to Manage User-defined Profiles.

Users can be categorized based on the mode of authentication. Local users are users that are authenticated locally in Mojo Launchpad. Federated users are users that authenticate using third-party identity providers to log in to Mojo Launchpad services through Mojo Launchpad.

Add User

 When you add a user, you first define the account information for the user. The user is assigned the Custom profile, by default. After saving the user account information, you must explicitly assign service privileges to the user.

There are two types of users, local users and federated users.

Mojo Launchpad authenticates a local user by means of a user-name password combination. A local user can be authenticated with two-factor authentication if two-factor authentication has been enabled for the customer to which the user belongs. Refer to Manage Two-Factor Authentication for details on enabling two-factor authentication.

A user that is authenticated by a third-party identity provider is called a federated user.

All users are local users when federated authentication is not available to your organization. If federated authentication has been activated and enabled for your organization, you must select a user type when you add a user.

A federated user is added automatically when he or she authenticates successfully with the third-party identity provider and signs in to Mojo Launchpad. If there is a change in the user details from the federated identity provider, the record for this user in Mojo Launchpad is overwritten when the user signs in. If the details of a federated user are modified in Mojo Launchpad, the changes coming from the federated identity provider are ignored. You can choose to override this behavior and overwrite a modified federated user record with the changes coming from the federated identity provider.

To add user account information, perform the following steps.

1. Log on to the Mojo Launchpad using your credentials.
2. Click Admin and then click the Users tab.
   A list of existing users appears.
3. Click New User to add a new user.
4. Enter the account information.

5. Click Save.

When a new user is added, a welcome email is sent to the user to set a password for his account. The user can click the link provided in this e-mail and set his password.

Note: The welcome email will be sent to the email Id mentioned in the Email field.

Assign Profile

Once a user has been added, you must assign a profile to him.

To assign profile to a user, perform the following steps.

1. Log on to the Mojo Launchpad using your credentials.
2. Click Admin and then click the Users tab.
   A list of existing users appears.
3. Right-click the required user row and click the Service Privileges option on the pop-up menu. Alternatively, you can click the user row and then click the Service Privileges tab.
   The Service Privileges screen appears.
4. Select the required profile.
5. Click Save.

Refer to the Manage Service Privileges for User section to know more about assigning service privileges to a user.

Note: If any changes are made to the profile assigned to a federated user in Mojo Launchpad, the changes coming from the federated identity provider are ignored. If you want reset this default behavior, you must select the Reset to Federated Profile check box on the Edit User page.

Change Profile

The following table details the changes in the privileges of a user when the profile is modified while editing the service privileges for a user.

Edit User

To edit user account information, you must have user management privileges.

You cannot edit the login ID of a user. All other fields are editable. If you edit the e-mail id of a user, a notification e-mail is sent to the old e-mail ID, and a confirmation e-mail is sent to the user's modified e-mail ID. The purpose of the confirmation e-mail is to seek confirmation for the modified e-mail ID. The user can confirm the modified e-mail ID by clicking the link provided in the confirmation e-mail.

Note: If you change an e-mail ID multiple times before it is confirmed by the user, the confirmation e-mail that has been sent to latest e-mail ID is considered valid. Even if the user clicks the links provided in the confirmation e-mail to an intermediate e-mail ID, it is ignored by Mojo Launchpad.

If the user has not received the confirmation e-mail, you can resend the e-mail to the modified e-mail ID by clicking the Resend email link seen below the Email field on the Edit user page. This link is visible only if the user has not confirmed the modified e-mail ID by clicking the link provided in the confirmation e-mail.

If you change the profile of a federated user, the profile provided by the federated identity provider is ignored. You can reset this behavior and accept the profile provided by the federated identity provider.

To edit user account information, perform the following steps.

1. Log on to the Mojo Launchpad using your credentials.

2. Click Admin and then click the Users tab. A list of existing users appears.

3. Click the user row to edit.

4. Modify the account information.

5. Click Save.

Changes to user account information reflect on subsequent login, that is, when the user logs out of and in to Mojo Launchpad.

Change Authentication Mode for User

A local user is a user that authenticates to Mojo Launchpad using Mojo Launchpad credentials. A federated user is a user that authenticates to Mojo Launchpad using his federated login credentials. It is possible to change the mode of authentication of a user at any time. Thus, a local user can become a federated user and vice versa.  

When a local user becomes a federated user, he or she is unable to use his Mojo Launchpad password to log in to Mojo Launchpad.

Lock/Unlock User

You might want to define users and keep them ready for use, but provide them access to Mojo Launchpad at a later point. Or, you might want to restrict access to Mojo Launchpad for users that are already active. You might also want to block some users instead of deleting them. In such cases, you can lock the users account to prevent them from accessing Mojo Launchpad.

You can unlock locked users at any time. When you lock a user, a padlock icon appears for this user indicating that the user account is locked.

To lock or unlock a user, perform the following steps.

1. Log on to the Mojo Launchpad using your credentials.

2. Click Admin and then click the Users tab.
   A list of existing users appears.

3. Right-click the user row you wish to lock or unlock.

4. Click the Lock/Unlock option on the pop-up menu.

Reset Password

You cannot modify the password for another user. However, you can reset a user's password if you have user management privileges.

When you reset a user's password, an e-mail is sent to the user to set a new password for his account. The user can click the link provided in the notification e-mail and set his new password.

To reset the password for a user, perform the following steps.

1. Log on to the Mojo Launchpad using your credentials.

2. Click Admin and then click the Users tab. A list of existing users appears.

3. Click the user row for the user whose password is to be reset.

4. Select the Reset Password check box to reset the user account.

5. Click Save.

An e-mail to set a new password is sent to the user's e-mail ID.

Search User

You can search for users based on login ID, name, email, last login or profile.

To search a user, perform the following steps.

1. Log on to the Mojo Launchpad using your credentials.

2. Click Admin and then click the Users tab.

3. Type the search keyword in the search users box at the top-right side.

A list of matching users appears as you type in the search keyword.

Delete User

You can delete both local users and federated users. When you delete a federated user, the record created for the federated user in Mojo Launchpad gets deleted. When the federated user logs in to Mojo Launchpad the next time, a fresh record for this user is created in Mojo Launchpad.

To delete user account information, perform the following steps.

1. Log on to the Mojo Launchpad using your credentials.

2. Click Admin and then click the Users tab. A list of existing users appears.

3. Right-click the user row to delete.

4. Click the Delete option from the pop-up menu that appears.
   A message prompting you to confirm the deletion appears.

5. Click Yes to permanently delete the user.

Note: If any problem occurs when deleting service-related data for the user in Mojo Launchpad, the user does not get deleted.

User Account Suspension Policy

In the Suspension Policy section under Admin>Settings, you can configure the duration for which a Mojo Launchpad user account must be suspended on consecutive login failures.

To configure this option, you must provide the following information: