Only users assigned to a user group that has the Create user permission enabled can create new users. To create a new user, click on the New user button. See below for a list of required and optional user attributes and additional options when creating new user records:

Only users assigned to a user group that has the Edit user permission enabled can edit any existing user record. Users with only the Edit own profile and password permission can edit just their own user records.

To edit a user record either click on the ⋮ button at the end of the user record that needs to be edited and select the Edit option or click on the user record to display the Overview tab and click on the Edit icon there.

The following can be changed when using the Edit option:

Only users assigned to a user group that has the Change passwords permission enabled can perform this action for any user record. Users with only the Edit own profile and password permission can change their credentials in their user profile.

To change credentials of a user either click on the ⋮ button at the end of the user record and select the Change credentials option or click on the user record to display the Overview tab and click on the Change credentials icon there.

The following can be changed when using the Change credentials option:

Note that when changing a username, a new password must be entered at the same time.

Since user records have various relations to the logs and history records, users cannot be deleted but can be disabled. This means that their user record will not be displayed in the list of users by default, and they will not be able to log in. Only users assigned to a user group that has the Delete user permission enabled can disable and enable users.

To disable or enable a user either click on the ⋮ button at the end of the user record and select the Disable (for enabled users) or Enable (for disabled users) option or click on the user record to display the Overview tab, then click on the ⋮ button there and select the Disable or Enable option there. Disabled users are automatically logged out from all their active sessions.

To display disabled users in the list of users, click on the Display Disabled button in the right upper corner of the Users section. Disabled users come up in grey font in the user list.

To protect against brute force attacks on users' credentials, CloverDX Server enforces a policy that will lock users after a certain number of failed login attempts. To learn more about this feature and how to update its default configuration, refer to the User lockout configuration section.

Once a user’s account is locked, you will see a little yellow lock icon next to their username in the Users tab of the Configuration section, and you will also be able to see the number of failed login attempts.

To unlock a locked user, click on the ⋮ button in the respective row, click on Unlock and confirm your action.

Welcome emails can be sent automatically during user creation if SMTP connection is set up under Configuration > Setup > Email. For existing user records, welcome email can be sent manually by clicking on the ⋮ button at the end of the user record and selecting the Send welcome email option.

This option will invalidate a user’s current password after logging in and force them to change it. To invalidate a user’s current password, click on the ⋮ button at the end of the user record and select the Invalidate password option.

Assignment to User groups gives users appropriate permissions. Only users assigned to a user group that has the Groups assignment permission enabled can access this form and assign users to user groups. To learn more about groups and permissions, see Groups. Note that if your Server environment is configured to use LDAP for user authentication and user synchronization, assignment to groups is controlled by the LDAP server and it cannot be overriden manually.