Users management
Through User management, administrators can create and manage users and their privileges. They can, for example, set the default permissions in System settings – Default permissions, under Vault management. Remote Desktop Manager offers advanced user rights management to restrict access to entries. Note that the availability of some features depends on the active workspace. For example, importing and synchronizing users from a connected identity provider requires a Devolutions Server workspace.
Manage users
To create, edit, delete, rename, or otherwise manage users, use the buttons in the toolbar located in Users – Users.
Add user
Opens the User management window to create a new user.
Duplicate user
Copies the selected user along with their or her informations.
Edit user
Opens the User management window to modify the selected user.
Assign license
Opens the License window with which to assign licenses to users.
Delete user
Deletes the selected user.
Rename login
Opens a window to rename the selected user.
Change your password
Opens a window asking for a new password (password generator included) for the selected user.
Remove MFA
Removes multifactor authentication from the selected user.
Fix SQL login
Checks if a login exists, if the user exists in the workspace, and if the user is mapped. If these conditions are not met, Remote Desktop Manager automatically resolves these issues.
User activity report
Opens the User activity report window, which lets administrators create a customized report spanning specific dates for the selected user.
SQL permission report
Open the SQL permission report window, which lets administrators inspect the selected user's SQL permissions.
Refresh
Refreshes the User and security management window to show recent changes.
User management settings
General
Username
Enter the username for the user. When using integrated security, the user must be selected from the directory.
Permission type
Select the permission level granted to the user. For more information, see User types.
Tags
Assign tags to the user account. External and Privileged are system tags, useful for identifying temporary users such as contractors. Custom tags can also be added: select an existing tag from the drop-down list, or enter a new name to create it on the spot. Modifying tags requires the Edit user permission.
Expiration date
Select the date on which the user account expires. Once that date is reached, the user can no longer open new connections. When less than 24 hours of access remain, a notification is displayed to the user. The offline mode duration never exceeds the expiration date. Select the clear button next to the field to remove the expiration date.
Enabled
Allow the user to sign in to the workspace. Clear the checkbox to disable the account without deleting it.
User must change password at next login
Force the user to define a new password the next time they sign in.
Send user an email invitation
Send an invitation email to the address entered in the Email field. This option is unavailable when the workspace or the authentication type does not support invitations.
Emergency login
Allow the user to sign in when the configured authentication provider is unavailable.
Workspace owner
Grant ownership of the workspace to the user.
Information
The Information section allows to store information regarding the users, such as their name, address, and more. It is divided in three sub-sections: Details, Address, and Phone.
User groups
Assign user groups to the user by checking the Is member box. Read User groups management for more information on this topic.
Vaults
Select which repositories the user can access. For more information read Vaults overview.
Application access
The application access section allows administrators to restrict access to Remote Desktop Manager or the Devolutions Password Manager browser extension.
Remote Desktop Manager
Select if the user can access the workspace from Remote Desktop Manager.
Select if the user can access the workspace from the Devolutions Password Manager browser extension.
Settings
In the Settings section, administrators can allow the user to enable the offline mode on the workspaces. This also hinges on the workspace's configuration. See the available modes below:
Disabled
No offline cache allowed for the user.
Cache only
Allows to save a cache of the workspace in order to improve loading performance. This option disallows the use of the offline mode.
Read-only
A read-only cache. The user will not be able to edit data in the workspace. This mode is allowed only for Devolutions Server and Devolutions Cloud.
Read/Write
An advanced cache, with change synchronization. This mode is allowed only for Devolutions Server and Devolutions Cloud.
See also
Manage users
To create, edit, delete, rename, or otherwise manage users, use the buttons in the toolbar located in Users – Users.
Add user
Opens the User management window to create a new user.
Duplicate user
Copies the selected user along with their or her informations.
Edit user
Opens the User management window to modify the selected user.
Assign license
Opens the License window with which to assign licenses to users.
Delete user
Deletes the selected user.
Rename login
Opens a window to rename the selected user.
Change your password
Opens a window asking for a new password (password generator included) for the selected user.
Remove MFA
Removes multifactor authentication from the selected user.
Fix SQL login
Checks if a login exists, if the user exists in the workspace, and if the user is mapped. If these conditions are not met, Remote Desktop Manager automatically resolves these issues.
User activity report
Opens the User activity report window, which lets administrators create a customized report spanning specific dates for the selected user.
SQL permission report
Open the SQL permission report window, which lets administrators inspect the selected user's SQL permissions.
Refresh
Refreshes the User and security management window to show recent changes.
User management settings
General
Authentication type
Select the user's authentication type:
Custom (Devolutions): If you wish to add an extra layer of security without using Integrated Security or without having to create new SQL login in your SQL Server the Custom Authentication type will be your best option. You will only need to create one SQL account within the SQL Server.
Database (SQL Server): Authenticate using the SQL login from your SQL Server.
Username
Enter the username for the user. When using integrated security, the user must be selected in the directory.
Integrated security
Specifies to use the Windows Integrated Authentication to authenticate to the workspace. Applies only to SQL Server and Devolutions Server, depending on their configuration. When checked, an ellipsis button appears to allow you to browse for the user account in the directory. Consult integrated security for more information.
Password
Enter the user's password. This field is disabled when using integrated security.
User type
Select the type of user to create. Select between:
Administrator: Grant full administrative rights to the user.
Read only user: Grant only the view access to the user.
Restricted user: Select which rights to grant to the user.
User: Grant all basic rights to the user (Add, Edit, Delete).
User license type
Select the license type of user. Select between:
Default: Grant full administrative rights to the user.
Connection Management: Grant only the view access to the user.
Password Management: Select which rights to grant to the user.
First name
Enter the first name of the user.
Last name
Enter the lat name of the user.
Insert the user's email address.
Information
Enter all the information needed regarding your new user.
User groups
User groups
When a user group needs to be added to a user, a description column will help you to select the proper user group.
Privileges
Allow reveal password
Allows the user to use the Reveal Password command.
Allow drag-and-drop
Allows the user to move the sessions using drag-and-drop from other applications.
View details
Allows the user to see the content of the Details tab for all sessions.
View information
Allows the user to see the content of the Information tab for all sessions.
View shared logs
Allows the user to see the content of the Logs that applies to a session.
Import
Allows the user to import sessions. The import menu (File – Import) and the import feature in the context menu will be grayed out if the option is not active.
Export
Allows the user to export sessions. The export menu (File – Export) and the export feature in the context menu will be grayed out if the option is not active.
Permissions
The Permissions section allows you to assign permissions. Controls are sometimes hidden depending on the workspace or the state of other controls.
Settings
Allow the user to enable the offline mode on the workspaces. This also depends on the workspace being configured to allow it. You can choose between:
Disabled
No offline cache allowed for that user.
Read-only
A read-only cache is allowed only for Devolutions Server and Devolutions Cloud..
Read/Write
An advanced cache, with change synchronization. This mode is allowed only for Devolutions Server and Devolutions Cloud.
See also
Last updated
Was this helpful?