User management
User management lets you maintain and configure users. You can create or delete users, import or export users, and lock or unlock users. You can also edit user information, search for users, configure SSH public keys, and view authorized hosts.
Create users
Users are accounts for technical engineers. Bastionhost supports local users, RAM users, Active Directory (AD) users, and Lightweight Directory Access Protocol (LDAP) users.
On the User Management page, you can create users in several ways.
Manual creation: Click New User. On the page that appears, enter the required user information. Fields marked with an asterisk (*) are required. Then, click Create User.
Import RAM users: Click Import RAM Users. In the pop-up window, select the RAM users that you want to import.
Import from a local file: Choose . You can upload a user file that was exported from Bastionhost. You can also download the template file, complete it, and then upload the file.
Procedure
To create a user, follow these steps:
In the navigation pane on the left, choose .
Optional: Manually create a user.
Click New User to open the configuration page.
Enter a Username, Password, and Name, select a Role, and add contact information as needed.
Click Create User.
Optional: Import users.
Choose .
On the Import Users page, click Download Template File.
Unzip the downloaded template file. Edit and save the user information in the spreadsheet.
On the Import Users page, click Upload File to upload the edited user spreadsheet.
Click Import Users.
Export users
To export users, follow these steps:
In the navigation pane on the left, choose .
In the lower-right corner of the user list, click Export Users to download the user information.
Delete users
To delete users, follow these steps:
In the navigation pane on the left, choose .
In the user list, select the users that you want to delete and click Delete.
Lock users
Locked users cannot log on to Bastionhost until an administrator unlocks their accounts.
To lock a user, follow these steps:
In the navigation pane on the left, choose .
In the user list, click the user that you want to lock.
On the User Configuration page, select the Lock this user checkbox.
NoteAlternatively, you can select the users in the user list and click Lock.
Unlock users
To unlock a user, follow these steps:
In the navigation pane on the left, choose .
In the user list, click the user that you want to unlock.
On the User Configuration page, clear the Lock this user checkbox.
NoteAlternatively, you can select the users in the user list and click Unlock.
Search for users
To search for a user, follow these steps:
In the navigation pane on the left, choose .
Enter a username in the search box. You can also filter the user list by user role and authentication method.
Edit basic user information
To edit basic user information, follow these steps:
In the navigation pane on the left, choose .
Click the username that you want to manage.
Click the Basic Information tab and edit the information as needed.
Edit user configurations
To edit user configurations, follow these steps:
In the navigation pane on the left, choose .
Click the username that you want to manage.
On the User Configuration page, you can lock or unlock the user, restrict the logon IP address range, and set the logon validity period and logon time.
Manage SSH public keys
SSH public keys are used by users who log on to Bastionhost using the Secure Shell (SSH) protocol.
Follow these steps to add an SSH public key:
In the navigation pane on the left, choose .
Click the username that you want to manage.
On the SSH Public Key tab, click Add SSH Public Key.
In the configuration window, enter a name and the public key content, and then save your changes.
View authorized hosts
Follow these steps to view authorized hosts:
In the navigation pane on the left, choose .
Click the username that you want to manage.
On the Authorized Hosts tab, view all hosts that the user is authorized to access.