# Manage LPSM Users

## User Account Management

You can define **Permissions Groups**, **User Groups**, and **Users** in LPSM from the **User Accounts** section of the **Settings** menu. You can create users, control user access to resources (assets), and specify the actions that users can perform.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FI7BB16ED5rJ7gWe2vs9e%2Fimage.png?alt=media&#x26;token=1e01bbc2-60aa-4bd7-825d-b8656ebd8ac8" alt="" width="563"><figcaption><p>User Accounts</p></figcaption></figure></div>

## Users

You can create multiple **Users** and assign different permissions to them. You need to create a user group and permission group before creating a user.<br>

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FRUCeDxRkWE4LcbMZFaWz%2Fimage.png?alt=media&#x26;token=8652fb7d-0c28-471f-953f-cb53b66fdfb4" alt="" width="563"><figcaption><p>Users</p></figcaption></figure></div>

{% hint style="info" %}
Refer to the [User Groups](#user-groups) section to create a user group and the [Permission Groups](#permission-groups) section to create a permission group.
{% endhint %}

<details>

<summary>Add a User</summary>

{% hint style="info" %}

* The **admin** user is a default, mandatory user and cannot be deleted.
* After the patch upgrade, you must add an email address for the admin user, which is set to empty by default if the default email address was previously **<admin@logpoint.local>**.
  {% endhint %}

1. Go to `Settings >> User Accounts >> Users`.
2. Click **Add**.\
   Add a User:\
   ![Add a User](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Fvf7reoElyy2YkplJEaD3%2Fimage.png?alt=media\&token=9c328488-9688-4ea2-b854-d4e36f92677f)

   User Pop-up Panel:\
   ![User Pop-up Panel](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Fqep3japd5ylzkkNs1Ypc%2Fimage.png?alt=media\&token=c3916f48-b11e-4823-a553-be9f5354eaa3)
3. Enter the **Username**, **Password**, **Re-Password** and select a **User Group** for the user in the **Account Information** section.
4. Enter the **Name**, **Email**, and **Time Zone** of the user in the **Personal Information** section.
5. Click **Submit**.\
   ![List of Users](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FvfHxe1JDCuazDd7nOT6o%2Fimage.png?alt=media\&token=bbe74217-9a36-4458-abd3-709c7272ca17)

{% hint style="info" %}

* Users can see logs collected at different intervals as per the time zone they configure. If a user works in Denmark and wants to view the logs collected in Europe, they have to view logs collected in Europe in the Danish Time Zone.
* Multiple **User Groups** can be mapped to a single user.
  {% endhint %}

</details>

<details>

<summary>Edit a User Profile</summary>

1. Click the **Username** of the user.
2. Click **Submit** after updating the information.

{% hint style="info" %}
Except the **Username**, all the other parameters can be edited.
{% endhint %}

</details>

<details>

<summary>Delete a User</summary>

You cannot delete an active user from the user list. Before you delete a user, make sure you deactivate it first. Deactivated users do not have permission to access the system.

1. To delete an existing user, deactivate the user by clicking the **De-Activate User** (![](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FKj2tru8vKlbSiiyLlyfZ%2Fimage.png?alt=media\&token=8a3a9469-5a44-4ba3-b57d-dd6252c4f23d)) icon from the **Actions** column.
2. Click **Yes** to deactivate the user. Enter your credentials to proceed.
3. Go to the **Manage De-Activated Users** page.
4. Click the **Delete** (<img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2F20K219eWMO85gyKejQPO%2Fimage.png?alt=media&#x26;token=abac87d1-aabc-4ed9-a01c-184c463cc030" alt="" data-size="original">) icon from **Actions** column to delete the user.
5. Click **Yes**.

</details>

<details>

<summary>Change the User Password</summary>

1. Click the **Change Password** (<img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FdVjEzVKGVG4gos337dHz%2Fimage.png?alt=media&#x26;token=252620e1-da51-4df3-8885-b3adbb75323c" alt="" data-size="original">) icon from the **Actions** column to open the **Change User Password** pop-up panel.\
   ![Change User Password Pop-up Panel](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2F4hz67pua38AbbvHFZQJ4%2Fimage.png?alt=media\&token=cbfcb3ad-1f46-40ea-a15c-a9f5e54a95d0)
2. Enter the **New Password** and enter the new password in the **Re-Password** field.
3. Click **Submit**.

</details>

## User Groups

You can create **User Groups**, add users to them and configure pool permissions in them. The user group is associated with one of the permission groups. Hence, a particular user group setting is a combination of pool permissions and site permissions. The user group setting is applied only to the users associated with a group.<br>

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FlBXb5lm0qyWmxqM9WUfD%2Fimage.png?alt=media&#x26;token=d3610118-1ec9-4357-858c-52ee4d64273d" alt="" width="563"><figcaption><p>User Groups</p></figcaption></figure></div>

{% hint style="info" %}
The User Account Administrator users cannot view the users present in the LSPM Administrator user group.
{% endhint %}

<details>

<summary>Add a User Group</summary>

1. Go to `Settings >> User Accounts >> User Groups`.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>There are two user groups in LPSM by default:</p><ul><li>The <strong>LPSM Administrator</strong> user group is a highly privileged user group. Users assigned to this group have access to all the settings items listed in the <strong>User Accounts</strong>, <strong>Configuration</strong>, <strong>LogPoint Configuration</strong>, and <strong>System</strong> tabs.</li><li>The <strong>User Account Administrator</strong> user group has all permissions except access to the <strong>System</strong> tab.</li></ul><p>These default user groups <strong>cannot</strong> be edited or deleted.</p></div>

2. Click **Add**.

   Add a User Group:\
   ![](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FFgT6ZYlG5I6dlw3qcThi%2Fimage.png?alt=media\&token=3e9ddcdd-8f24-4b05-8ac3-c845116b5554)

   User Group Pop-up Panel\
   ![](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FVu5k8yVrlCRttzFjaXE5%2Fimage.png?alt=media\&token=14b7df25-d5c6-49ad-b8ea-d800fb644361)

3. Enter a **Name** and a **Description** for the user group.

4. Select a **Permission Group** from the drop-down.

5. Select the LogPoint pool from the **Pool Permission**. Setting the pool permission allows users to search logs from only the selected pools.

6. Click **Submit**.\
   ![List of User Groups](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Fw34m6ttBLslsUCd63Nhe%2Fimage.png?alt=media\&token=c6e0b66d-98e3-4cf5-bc0d-164793a175f3)

</details>

<details>

<summary>Edit a User Group</summary>

1. Click the **Name** of the user group.
2. Update the information and click **Submit**.

</details>

<details>

<summary>Delete a User Group</summary>

Before deleting a user group, make sure that no user is currently using the user group.

1. To delete a user group, click the **Delete** (![delete](https://docs.logpoint.com/docs/lpsm-user-account-management/en/latest/_images/delete_icon.png)) icon from the **Actions** column of the user group.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><ul><li>To delete multiple user groups, select the user groups. Click the <strong>More</strong> drop-down and select <strong>Delete Selected</strong>.</li><li>To delete all user groups, click the <strong>More</strong> drop-down and select <strong>Delete All</strong>.</li></ul></div>
2. Click **Yes**.

</details>

## Permission Groups

**Permission Groups** allow you to control the access levels of the users. You can assign **Read**, **Create/Edit**, or **Delete** permissions to **LPSM Site permission items**. You can also group different permissions into a single permission group.

<div align="left"><figure><img src="https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FvOh2hIAJKzPGQSf37B8L%2Fimage.png?alt=media&#x26;token=de385734-e57a-4dd1-90c1-e01ff8a1e8c9" alt="Permission Groups" width="563"><figcaption><p>Permission Groups</p></figcaption></figure></div>

<details>

<summary>Add a Permission Group</summary>

1. Go to `Settings >> User Accounts >> Permission Groups`.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>There are two permission groups in LPSM by default:</p><ul><li>The <strong>Operator</strong> permission group has read only site permission.</li><li>The <strong>Admin</strong> permission group has all the read, create, and delete site permissions.</li></ul><p>The default permission groups <strong>cannot</strong> be edited or deleted.</p></div>
2. Click **Add**.\
   Add a Permission Group:\
   ![](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2Fkmv98urrFn4VT7sm3dUs%2Fimage.png?alt=media\&token=a9232d39-fd6b-427b-a5c8-1361471a76ff)

   Permission Group Pop-up Panel:\
   ![](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2F56GsNkVaRx8X4MJnNI9Y%2Fimage.png?alt=media\&token=78a5b16d-c271-461b-a5e8-adb62e9f5af1)
3. Enter a **Name** and a **Description** for the permission group.
4. Select the **LPSM Site permission Items** such as **Dashboards**, **Reports**, **Incidents**, **ReportTemplates**, **AlertRules**, **AnalyticsPackages**, **SearchTemplates**, and **SearchPackages** along with the permissions of **Read**, **Create/Edit**, or **Delete**.

   For example, if you select **Read**, and deselect **Create** and **Delete** for **Dashboards**, then the user mapped with the corresponding **Permission Group** can view the subscribed dashboards but cannot add or delete them.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>When the site permission of <strong>Delete</strong> is selected then the permission of <strong>Read</strong> and <strong>Create</strong> is enabled automatically. Similarly, when access to <strong>Create</strong> is selected, <strong>Read</strong> is also enabled.</p></div>
5. Click **Submit**.\
   ![List of Permission Groups](https://3198401301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhzE0kPDYI002AO7fHbFv%2Fuploads%2FSFxS1ItnXZ7U2vKSzNBX%2Fimage.png?alt=media\&token=e2b4ad60-1a3c-4cca-bfe7-c50324f6ad3b)

The newly added permission group can be assigned to any user group.

</details>

<details>

<summary>Edit a Permission Group</summary>

1. Click the **Name** of the group.
2. Update the information and click **Submit**.

</details>

<details>

<summary>Delete a Permission Group</summary>

Before deleting a permission group, make sure it is not assigned to any user.

1. To delete a permission group, click the **Delete** (![delete](https://docs.logpoint.com/docs/lpsm-user-account-management/en/latest/_images/delete_icon.png)) icon from the **Actions** column of the permission group.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><ul><li>To delete multiple permission groups, select the permission groups. Click the <strong>More</strong> drop-down and select <strong>Delete Selected</strong>.</li><li>To delete all permission groups, click the <strong>More</strong> drop-down and select <strong>Delete All</strong>.</li></ul></div>
2. Click **Yes**.

</details>
