The account system of Elastic Desktop Service (EDS) Enterprise supports two account types: convenience accounts and enterprise AD accounts. A convenience account allows an end user to log on to an Alibaba Cloud Workspace terminal and connect to a cloud computer. This topic describes how to create convenience accounts.
Background information
A convenience account is an account type specific to Elastic Desktop Service (EDS), suitable for simple scenarios that do not require integration with an enterprise AD system. For more information about account systems, see End User Account Systems.
Depending on who activates the account, convenience accounts are categorized as follows:
User activation: An administrator sets a username and provides an email address or mobile number. The end user uses the login information, including an initial password, that they receive at this email address or mobile number to log in to an Alibaba Cloud Workspace terminal. When they log in for the first time, they are prompted to set a personal password.
administrator-activated: An administrator directly sets the username and password. The account is activated by default upon creation. The administrator must provide the account credentials to the end user offline. The end user can then log on to an Alibaba Cloud Workspace terminal without having to change the password. You can set a regular user (who must have a user-activated convenience account) as a user administrator. After the user administrator is set, information related to administrator-activated convenience accounts, such as logon information and password reset notifications, is sent to the user administrator's email address.
Prerequisites
Before adding a convenience account to an organization, you must first create the organization. For more information, see Create an organization.
Create a convenience account
Log on to the Elastic Desktop Service Enterprise console.
In the left-side navigation pane, choose User Center > User Management.
On the User Management page, click the User tab, and then click Create User. You can create convenience accounts by using one of the following methods:
Manual entry
Click the Manual Entry tab, configure the parameters, and then click Manual Entry.
Parameter
Required
Description
User Type
Yes
The type of the convenience account. Valid values: User-activated and Administrator-activated.
Username
Yes
The username used to log on to the Alibaba Cloud Workspace terminal. The username must be 3 to 25 characters long and start with a lowercase letter or a digit. It can contain lowercase letters, digits, hyphens (-), and underscores (_). The username cannot consist only of digits or be a reserved account name of the operating system. For more information, see Convenience user naming conventions.
Display Name
No
A display name for identification purposes. This name is not visible to the end user.
Contact Info (Email Address)
Yes
The email address or phone number is used to receive notifications, such as cloud computer assignment details, logon information, initial passwords, or password reset alerts. Make sure that you enter valid contact information. At least one of the fields is required.
Parent Organization
No
Defines the user's position within your business's organizational structure, which is hierarchical. A user can belong to only one organization.
You can assign the user to an organization during creation or add the user to an organization later as needed.
User Group
No
A collection of users. A user can belong to multiple user groups, and a user group can contain users from different organizations. User groups have no hierarchy.
You can use user groups to bulk-assign permissions for shared cloud computers, cloud browsers, and cloud applications. You can also apply different logon policies and file approval permissions to different user groups for fine-grained access control.
Password
Yes
This parameter is required for Administrator-activated users. The password must be at least 10 characters long and contain characters from at least three of the following types: uppercase letters, lowercase letters, digits, and special characters (excluding spaces).
Password Validity
No
By default, passwords never expire. You can also set a validity period from 7 to 365 days. When a password expires, the user must reset it to log on again.
Account Lock Time
No
This option is available only for Administrator-activated users. You can set a time to lock the account. After an account is locked, the end user cannot use this convenience account to log on to an Alibaba Cloud Workspace terminal.
Grant Local Admin Permission
No
Remarks
No
Enter supplementary information about the account as needed.
Batch entry
Click the Batch Entry tab, configure the parameters, and then click Disable.
Parameter
Required
Description
User Type
Yes
The type of the convenience account. Valid values: User-activated and Administrator-activated.
Password Validity
No
By default, passwords never expire. You can also set a validity period from 7 to 365 days. When a password expires, the user must reset it to log on again.
Account Lock Time
No
This option is available only for Administrator-activated users. You can set a time to lock the account. After an account is locked, the end user cannot use this convenience account to log on to an Alibaba Cloud Workspace terminal.
Grant Local Admin Permission
No
By default, new convenience accounts have Grant Admin Permission permission.
NoteA user with local admin permission can install software or modify system settings on a cloud computer.
Changes to local admin permissions take effect after you restart the cloud computer.
Upload File
Yes
Click Download, open the downloaded template, enter the user information in the specified format, and then save the file.
For user-activated scenarios, when you enter user information, the first column
Usernameis the username, the second columnEmailis the user's email address, and both are required fields.If the user is administrator-activated, the first column
Usernameis the username, and the fourth columnPasswordis the password. Both are required fields.If you want to assign a new convenience account to an organizational structure, you can enter the ID of the target organizational structure in the last column of the template,
OrgId. To find theOrgId, hover your mouse pointer over the organizational structure and view the ID in the tooltip.
Click Upload Local File, select the template file that contains the user information, and follow the on-screen instructions. The system automatically imports the user information from the file.
After the import is complete, a Created. message appears in the Create User panel. You can click View Account to view the import status of each user's data. If the import fails, check whether the user information in the file is in the correct format.
NoteThe system does not send a notification when a convenience account is created. Notifications are sent only after a cloud computer or a shared cloud computer is assigned to the user.
Set a user administrator
For Administrator-activated convenience accounts, you must provide the account credentials to end users offline. To ensure end users receive password reset notifications promptly, you can set a user-activated convenience account as a user administrator. This account will then receive password notifications on behalf of the Administrator-activated convenience accounts.
On the User Management page, on the User tab, select a user-activated convenience account.
In the Actions column, click Grant Administrator Permission.
NoteIf this button is unavailable, a user administrator already exists. You must first revoke the permission from the current user administrator.