User Management: Creating New Users in Metasys

This guide covers creating and managing user accounts in Metasys MUI, including role assignment and permission configuration.

User Account Fundamentals

Account Types

Type	Description
Local User	Account stored in Metasys server
Domain User	Windows Active Directory integration
Service Account	For integrations and automated tasks

User Properties

Property	Description
Username	Login identifier
Full Name	Display name
Email	For notifications
Role	Permission set
Status	Active/Inactive
Password Policy	Expiration, complexity

Creating a New User

Prerequisites

• Administrator role or User Management permission
• Planned role assignment
• User information (name, email)

Step-by-Step Process

1. Navigate to User Management

   • Go to Administration > Security > Users
   • Or Administration > User Management

2. Click Add User

   • Select "Add New User" button
   • Choose account type (Local or Domain)

3. Enter User Details

   • Username (login ID)
   • Full Name
   • Email address
   • Phone (optional)
   • Description (optional)

4. Set Initial Password

   • Enter temporary password
   • Enable "User must change password at next login"
   • Or generate random password to email

5. Assign Role

   • Select from available roles
   • Multiple roles can be assigned
   • Most restrictive permission applies for conflicts

6. Configure Options

   • Account expiration date (optional)
   • Login restrictions (times, locations)
   • Notification preferences

7. Save and Verify

   • Click Save
   • Test login with new credentials

Role Assignment

Built-in Roles

Role	Typical Use
Administrator	Full system access
Operator	Monitor and control
Viewer	Read-only access
Engineer	Configuration access
Tenant	Limited area access

Custom Roles

Create custom roles for specific needs:

1. Go to Administration > Roles
2. Click Add Role
3. Name and describe the role
4. Assign permissions
5. Save role
6. Assign to users

Permission Categories

Space Permissions

Permission	Allows
View	See space and equipment
Operate	Change setpoints, commands
Configure	Modify equipment settings
Manage	Full control including delete

Feature Permissions

Permission	Allows
Alarms	View, acknowledge, silence
Schedules	View, modify schedules
Trends	View, export trend data
Reports	Run, schedule reports
Users	Create, modify user accounts

Best Practices

Account Management

Practice	Reason
Individual accounts	Accountability, audit trail
Role-based access	Easier management
Regular audits	Remove unused accounts
Strong passwords	Security requirement

Naming Conventions

Consistent usernames help management:

• jsmith - First initial, last name
• john.smith - Full name with separator
• smith_j - Last name, first initial

Documentation

Track user accounts:

• Maintain user roster
• Document role assignments
• Record access justification
• Note account creation date

Modifying Users

Changing Permissions

1. Select user from list
2. Click Edit
3. Modify role assignments
4. Adjust space permissions
5. Save changes
6. Changes effective immediately

Password Reset

1. Select user
2. Click Reset Password
3. Enter new temporary password
4. Enable forced change at login
5. Notify user of new password

Disabling Accounts

1. Select user
2. Click Edit
3. Set Status to Inactive
4. Save changes
5. User cannot log in

Active Directory Integration

Benefits

• Single sign-on (SSO)
• Centralized password management
• Automatic account provisioning
• Group-based role mapping

Configuration

1. Configure AD connection in server settings
2. Map AD groups to Metasys roles
3. Import or sync users
4. Test authentication

Audit Trail

All user actions are logged:

• Login/logout times
• Commands executed
• Settings changed
• Alarms acknowledged

Access logs via Reports > Security Audit.