A very important thing to know is that if you want to add Datafari roles to an existing Active Directory user, you need to 'Add' it in Datafari as you were adding a fresh new user ! Although, you don't need to add an Active Directory user through this functionality if you don't want to give him some Datafari roles. If you have configured the Active Directory in Datafari, all the AD users will be able to connect to Datafari without further configuration.
As a Search administrator you may want to add/remove or modify a user for Datafari. This can be done through the admin interface of Datafari, the 'User Management' tab allows you to 'Add' or 'Modify' users:
1) Let's start with the 'Add User'. This functionality is meant to add new users to Datafari or to add roles to an existing Active Directory user. If you click on this tab, a form will be displayed with some fields to fill :
- username: Here you can enter the username you want to create or add to the datafari users in case it is an Active Directory user
- AD User: check it if you are adding an Active Directory user to give him roles. If this option is checked, the password fields will disappear.
- password: the user password (this field is not available if you have checked the 'AD User' option)
- retype password: confirm the user password (this field is not available if you have checked the 'AD User' option)
- add role: here you can add roles to the user. By default, 3 roles are available:
- SearchAdministrator: this role give a full access to all the features of Datafari
- SearchExpert: this role give an access to all the SearchExpert features
- ConnectedSearchUser: this is the basic user role that allows the user to connect to Datafari
To add a role, type the first characters of the role, a pop-up suggestion will appear, select the suggestion to confirm the wanted role.
If you want to remove a role, simply click on the red cross associated to the role.
Once you have fulfilled all the fields, you can click on the 'ADD' button. If everything is correct, you will have a green message saying 'User Successfully Saved', otherwise you will have a red message telling you what's wrong.
When adding an Active Directory user, Datafari will use the AD configuration to test if the user exists before adding it. So a 'User Successfully Saved' message indicates that the user has been found in the Active Directory and the selected Datafari roles added to it (in the Datafari system, not as real Active Directory roles)
2) The 'Modify Users' tab shows all the users in Datafari that have roles. All the Active Directory users that don't have any role are not displayed in this view:
In this view you can:
- Change the password of a user by typing a new password and press the 'Return' key on your keyboard
- Add or remove roles to a user as in the 'Add User' interface. Adding or deleting a role is immediately taken in account.
Manager-GUI role
Note that as of version 3.1.0, the admin user has a "manager-gui" role, that is automatically added by Tomcat. This role has no purpose for Datafari per se. We recommend not removing it for now, until we provide an update that makes it properly disappear that the UI.