3.2 Managing Users

Secure API Manager requires that you create user accounts for the developers and IT personnel who access the Secure API Manager Publisher and Store. Secure API Manager integrates with Access Manager to provide the OAuth2 tokens for each API request to the API Gateway to authorize the requests to the APIs. For more information about the Access Manager integration, see Integrating Secure API Manager with Access Manager in the NetIQ Secure API Manager 1.1 Installation Guide.

You create and manage user accounts through the management console with any administrator account. Refer to the following information to create, edit, and delete accounts.

3.2.1 Creating User Accounts

You must create user accounts for the people who access the Secure API Manager Publisher and Store. You can also create additional administrator accounts besides the default admin account. You must have the admin role to create accounts.

To create a new user account:

  1. Log in to the Secure API Manager management console as an administrator.

    https://lifecycle-manager-dns-name:9444/carbon

    The dns-name is the fully qualified host name of the appliance running the Lifecycle Manager component.

  2. Click Main, then select MAIN > USERS AND ROLES > Add.

  3. Click Add New User.

  4. Create the user by specifying a user name and password. The password must be 5 to 30 characters in length.

  5. Click Next.

    NOTE:If you click Finish instead of Next, the user you created does not have access to any consoles in Secure API Manager. You would have to assign roles to this user account at a later time to give the user access.

  6. Select the appropriate role or roles for this user, then click Finish. The management console takes you to the list view of all of the users.

After you create user accounts, you must notify the users of the new accounts and how to access the management console, the administration console, the Publisher, or the Store. You must also inform users that they must change their password after they log in for the first time.

3.2.2 Changing Passwords for Users

Any account with the admin role has the appropriate rights to change passwords for users when they forget their passwords. Users who can log in to the Store can change their own passwords in the Store.

To change the password for a user account:

  1. Log in to the Secure API Manager management console as an administrator.

    https://lifecycle-manager-dns-name:9444/carbon

    The dns-name is the fully qualified host name of the appliance running the Lifecycle Manager component.

  2. Click Main, then select MAIN > USERS AND ROLES > List.

  3. Click Users.

  4. Search for the user or find the appropriate user in the list.

  5. Click Change Password, then follow the prompts to change the user’s password.

You must inform the user what the new password is and have the user change this password after the user logs in for the first time.

3.2.3 Managing User Accounts

The management console allows you to edit accounts, change roles, view the roles assigned to users, and delete users. Administrator accounts are the only accounts that can modify or delete accounts.

To manage a user account:

  1. Log in to the Secure API Manager management console as an administrator.

    https://lifecycle-manager-dns-name:9444/carbon

    The dns-name is the fully qualified host name of the appliance running the Lifecycle Manager component.

  2. Click Main, then select MAIN > USERS AND ROLES > List.

  3. Click Users.

  4. Search for the user or find the appropriate user in the list.

  5. Click the appropriate action to perform.

    • Assign Roles

    • View Roles

    • Delete

  6. Follow the prompts to perform the appropriate action.