Creating and maintaining users for a stand-alone server

You can use the Process Admin Console to create, update, and delete users for a stand-alone server.

Before you begin

Notes:

To create and maintain users, log in as an administrative user, such as a user in the DeAdmin role. Do not remove the user or group assigned to the DeAdmin role. Only users and groups assigned to this role can administer servers and users.
To create users, you must have permission at the WebSphere Application Server level.

Important: You cannot create a new user using the Process Admin Console if a user was created in the past with the same user name. Once a user has been created using the Process Admin Console, it is kept in the BPM system. Even if the user is subsequently deleted, the user entry is not removed from the BPM DB and the internal authorization system.

About this task

The default user registry consists of a federated repository with two base entries: the default internal security provider and the file-based repository.
If you added a new default administrative user during installation, the new user is automatically added to the tw_admins user group. Users in the tw_admins group can administer Process Servers, Performance Data Warehouses, and internal users and groups.
Users and user groups that you create using the WebSphere Administrative Server administrative console are added to the file-based repository.
Users in a default internal security provider cannot be added to the user groups in the file-based repository.
Users in the file-based repository can be added to a default internal security provider.

Restriction: Specify unique user IDs for every user in the following groups:

WebSphere Application Server Virtual Member Manager (VMM) user repository security groups
Lightweight Directory Access Protocol (LDAP) user repository security groups
Internal IBM® Business Process Manager custom user registries

Procedure

To create users:
1. In the Server Admin area of the Process Admin Console, click the indicator next to User Management to list the available management options.
2. Click User Management.
3. In the User Management > Maintain User Settings window, enter a user name, a full name, and a password. Passwords must meet the following requirements:
  - Must include at least six characters.
  - Must not be the same as the user name.
  - Must not be the same as the existing password.
  - Must be different from the three most recently used passwords.
4. Enter the password a second time to confirm it.
5. Click Add.
To update users by changing password or other account settings:
1. In the Server Admin area of the Process Admin Console, click the indicator next to User Management to list the available management options.
2. Click User Management.
3. In the User Management > Maintain User Settings window, enter a complete or partial user name in the Retrieve Profile field.
4. Click Retrieve.
5. Change settings as required and click Update.
To delete users:
1. In the Server Admin area of the Process Admin Console, click the indicator next to User Management to list the available management options.
2. Click User Management.
3. In the User Management > Maintain User Settings window, enter a complete or partial user name in the Retrieve Profile field.
4. Click Retrieve.
5. Select the account that you want from the Internal IBM BPM Users list.
6. Click Delete.