Manage ARM users and roles in the web client

In addition to the User Management tile in the Configuration application, ARM administrators can manage ARM users and roles in the web client. In the web client, you can add users and groups who can log in to ARM, assign or change their roles, and remove accounts from ARM.

The web client and the rich client use the same user management settings, so changes you make in one client appear immediately in the other.

For a description of each role, see Define the ARM user roles.

Open Users and Role Management

1. Log in to the web client as an ARM administrator.

2. In the toolbar, locate Settings.

   If Settings is not available, verify that you are logged in as an ARM administrator.

3. Click Settings > Users and Role Management.

   The page displays two panels: Available accounts, where you search for users and groups, and List of accounts which can use ARM.

Add users or groups to ARM

1. Open Users and Role Management.

2. Under Available accounts, select the Users or Groups tab.

3. If required, select the credentials needed to utilize Credentials for searching.

4. Enter the name of the user or group you want to locate, and start the search.

5. Double-click the user or group in the results, or drag it to List of accounts which can use ARM.

   The account is added to the list with Read permissions by default.

6. Confirm your changes.

For information about using groups as ARM users, including nested groups and the hierarchy of role assignments, see Add ARM users.

Assign or change a role

1. Open Users and Role Management.

2. In List of accounts which can use ARM, locate the user or group.

3. Select a role for the account. The following roles are available:

   • Administrators: Administrator, Junior Administrator

   • Data Owner: Data Owner, Help Desk, HR, User Defined 1, User Defined 2

   • Auditor

   • Requester

   • No Access

     Note: if a role is renamed in the rich client, the web client will not reflect the custom name.

4. Confirm your changes.

Remove an account from ARM

1. Open Users and Role Management.

2. In List of accounts which can use ARM, select the user or group.

3. Click Remove from ARM.

4. Confirm your changes.

Confirm your changes

Changes on the Users and Role Management page are not saved until you confirm them.

1. After you add, change, or remove accounts, click Apply.

2. In the Confirm Changes dialog, review the changes and confirm them.

Multi-factor authentication

The MFA column on the Users and Role Management page lets administrators enable or disable multi-factor authentication for each user who signs in to the web client.