Skip to main content

User Account Management

The User Account Management job helps admins to add user accounts on Linux devices remotely. Creating multiple user accounts on a device ensures each user has their own login experience. Users can then customize their device settings without affecting other users.  

note

This feature is supported on Linux devices with SureMDM Agent version >= 7.11.0

To create a user account, follow these steps:

1.  Login to the SureMDM Console.

2.  Navigate to Jobs > New Job > Linux >  User Account Management.

3.  Configure the following settings and click OK.

SettingsDescription
Job NameEnter the required job name.
Action Type
Select the action type for managing user accounts. 
i. Create User
ii. Delete User
iii. Modify Permissions
iv. Change User Password
v. Time-Based Access Control
vi. Account Activation/Deactivation

Following are the Action Type options:

i. Create Users: Use this option to create users:

OptionsDescription
Account Type
a. Administrator - Provide the user with admin privileges.
b. Standard - Users can only modify their settings.
User NameEnter the user name.
Full NameEnter the User’s Full name. 
PasswordEnter the password of the account.
Password HintEnter the password hint to help the user remember the account password.
Allow User to Change PasswordEnable this option to allow users to change their password.
Force Password ChangeEnabling this option will force the users to set a new password using the default password set.
Time-Based Access ControlEnable this option to implement the user’s access control based on a specified time parameter.

ii. Delete Users: Delete selected users:

OptionsDescription
User NameEnter the user name.
note

Ensure to enter the correct username. Deletion of the user account is ignored if the user does not exist.

iii. Modify Permissions: Modify the permissions of an existing user from Admin to Standard and vice versa:

OptionsDescription
User NameEnter the User Name.
Change User Type FromSelect user Type From: Select one of the following options:
a. Administrator to Standard - Changes the user privileges from Admin to Standard. Provide the user with admin privileges.
b. Standard to Administrator- Changes the user privileges from Standard to Admin. Provide the user with admin privileges.
note

Ensure to enter the correct username. User access level will be changed as per the selection and remains unchanged if the username does not exist on the devices.

iv. Change User Password: Enter the username without spaces, and use + button to add multiple usernames if needed:

OptionsDescription
User NameEnter the user name.
PasswordEnter the password of the account.
Confirm PasswordRe-enter the password to verify.
Allow User to Change PasswordEnable this option to allow users to change their password.
Force Password ChangeEnabling this option will force the user to set a new password using the default password set.
note

Ensure to enter the correct username. Change of Password for the user account is ignored if the user does not exist.

v. Time Based Access Control: Enable this option to implement user’s access control based on a specified time parameter:

OptionsDescription
User NameEnter the user name.
Start TimeSpecify when user access to the device begins. Logon attempts before this time will be restricted.
End TimeSpecify when user access to the device ends. Logon attempts after this time will be restricted.
RepeatSelect applicable days for access control.
Add ScheduleSelect this option to schedule the Time Based Access Control.
note
  • Specify when user access to the device begins/ends. Logon hours specified in the time-based access control adhere to the device’s local time and Logon attempts during unspecified schedule will be restricted.
  • Ensure to enter the correct username when configuring logon hours for users. Time-Based Access Control settings will be ignored if the specified user does not exist.

vi. Account Activation/Deactivation: Select this action to manage user accounts.

OptionsDescription
User NameEnter the user name.
Select ActionSelect one of the following options:
a. Enable User - Enables the user account(s) disabled on the device.
b. Disable User - Disables the user account(s) active on the device.

4. Once done, click Save to save the changes. The newly created job will be listed in the Jobs List section. 

5.  Click Apply to launch the Apply Job/Profile To Device prompt.

6.  In the Apply Job/Profile To Device prompt, select the job and click Apply.