1. Administration of user accounts

Finder admin's user privileges provides access to two admin's tasks under the tools menu bar item:

• Manage accounts, to manage Finder's accounts
• Refetch usernames from LDAP server

1.1. Logging into Finder Accounts Administration

Launch Finder, click to File, Connect to logging into Finder with administrator account (username: admin).

1.2. Manage accounts

On the left-hand side of the Finder, the list of already created accounts are displayed in the Accounts panel:

By right-clicking on one account you can:

• Edit it (it opens the same display as when creating an account; please refer to the corresponding section for more information)

• Delete it

• Assign category rights to enable category administration for it

1.3. Create new account

To create a new account, you have to:

1. Right-click in the Accounts panel and click on Create new account

2. Enter the name of the new account

   • 

3. Fill out the following form:

   • 

   • Password and Confirmation enable to set the password needed to log in with this account. The first time the user logs in, he'll be prompted to change his password.

   • Timezone settings define its default work location.

   • E-mail address is used for sending account creation's information and for NEXThink Alerts.

   • Information level defines the access rights to the information.The three levels, Personal, Pseudonymousand Anonymous provide the following accesses for each available object:

     • 

   • Allow edition of applications and object tags enables edition and changes on keywords, application name, and application company.

   • Access rights let the possibility to restrict the access of the account to a subset of sources. This subset is defined by selecting one or more keywords belonging to a category based on sources. For instance, if one selected the keyword "Headquarters" of the category "Location", the user logging in with that account will only see the sources (+ their related activity, applications, ...) located in the headquarters; all other sources and information not related to this location will be invisible for him.

4. Click on Save and close

5. If the Information level for the new user is Personal, you are prompted to enter the authority password. The Authority User manages and reports the personal information access requests coming from the users with private information access. The authority account configuration is part of the NEXThink Engine Webconsole.

   • 

6. Click OK to apply the changes and send email to the new user if the option is selected

   • 

1.4. Refetch usernames from LDAP server

• This command, Tools, Refetch Usernames from LDAP Server, will launch an Engine internal routine to interrogate connected LDAP server, in order to refresh usernames for each user collected information.

• A warning message will remind admin user that intensive request to LDAP server may affect overall LDAP performance.
• This command is mainly used when LDAP server integration has been performed at a later time, after Engine installation

Note: Routine engine's LDAP interrogations are made automatically each time a new user is found