User management

Updated at:

User management lets you maintain and configure users. You can create or delete users, import or export users, and lock or unlock users. You can also edit user information, search for users, configure SSH public keys, and view authorized hosts.

Create users

Users are accounts for technical engineers. Bastionhost supports local users, RAM users, Active Directory (AD) users, and Lightweight Directory Access Protocol (LDAP) users.

On the User Management page, you can create users in several ways.

  • Manual creation: Click New User. On the page that appears, enter the required user information. Fields marked with an asterisk (*) are required. Then, click Create User.

  • Import RAM users: Click Import RAM Users. In the pop-up window, select the RAM users that you want to import.

  • Import from a local file: Choose More Operations > Import from File. You can upload a user file that was exported from Bastionhost. You can also download the template file, complete it, and then upload the file.

Procedure

To create a user, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. Optional: Manually create a user.

    1. Click New User to open the configuration page.

    2. Enter a Username, Password, and Name, select a Role, and add contact information as needed.

    3. Click Create User.

  4. Optional: Import users.

    1. Choose More Operations > Import Users.

    2. On the Import Users page, click Download Template File.

    3. Unzip the downloaded template file. Edit and save the user information in the spreadsheet.

    4. On the Import Users page, click Upload File to upload the edited user spreadsheet.

    5. Click Import Users.

Export users

To export users, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. In the lower-right corner of the user list, click Export Users to download the user information.

Delete users

To delete users, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. In the user list, select the users that you want to delete and click Delete.

Lock users

Locked users cannot log on to Bastionhost until an administrator unlocks their accounts.

To lock a user, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. In the user list, click the user that you want to lock.

  4. On the User Configuration page, select the Lock this user checkbox.

    Note

    Alternatively, you can select the users in the user list and click Lock.

Unlock users

To unlock a user, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. In the user list, click the user that you want to unlock.

  4. On the User Configuration page, clear the Lock this user checkbox.

    Note

    Alternatively, you can select the users in the user list and click Unlock.

Search for users

To search for a user, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. Enter a username in the search box. You can also filter the user list by user role and authentication method.

Edit basic user information

To edit basic user information, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. Click the username that you want to manage.

  4. Click the Basic Information tab and edit the information as needed.

Edit user configurations

To edit user configurations, follow these steps:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. Click the username that you want to manage.

  4. On the User Configuration page, you can lock or unlock the user, restrict the logon IP address range, and set the logon validity period and logon time.

Manage SSH public keys

SSH public keys are used by users who log on to Bastionhost using the Secure Shell (SSH) protocol.

Follow these steps to add an SSH public key:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. Click the username that you want to manage.

  4. On the SSH Public Key tab, click Add SSH Public Key.

  5. In the configuration window, enter a name and the public key content, and then save your changes.

View authorized hosts

Follow these steps to view authorized hosts:

  1. Log on to the Bastionhost web management page.

  2. In the navigation pane on the left, choose Users > User Management.

  3. Click the username that you want to manage.

  4. On the Authorized Hosts tab, view all hosts that the user is authorized to access.