Creating and Managing User Accounts

This chapter describes how to create and manage user account in Lucidum.

Changing the Admin Password

To create the first user account, you must sign in with the default Admin account. Your Lucidum sales representative can provide you with the default password for the Admin account.

You should immediately change the password for the default Admin account.

To do this:

1. Log in to Lucidum with the user name “Admin” and the default password.

2. Navigate to Settings > User Management.

3. In the User Management page, find the Admin user.

   

4. Click on the Change Password link for the Admin user.

   

5. In the Change Password modal, enter the new password. The password must:

   • Be at least eight characters in length

   • Include at least one uppercase letter

   • Include at least one lowercase letter

   • Include at least one number

   • Include at least one of the following symbols: @, $, !, %, *, &, -, ^ (other symbol characters are not allowed)

   • Cannot contain spaces

6. Click Confirm to save the new password.

Creating a New User Account

Lucidum uses roles to assign permissions to users. You can assign each user one or more roles. Lucidum includes default roles. You can also create custom roles.

To create a new user account in Lucidum:

1. Navigate to Settings > User Management.

   

2. In the User Management page, click New User.

   

3. In the New User modal page, enter the following:

   • Name. Name of the new user.

   • Email. Email address of the new user.

   • SSO User. Toggle on if you want to use your existing SSO solution for the new user. For details on enabling SSO in your Lucidum system, see Enabling SSO.

   • Password. If you did not toggle on SSO, this field appears. Enter a password for the new user. The password must:

     • Be at least eight characters in length

     • Include at least one uppercase letter

     • Include at least one lowercase letter

     • Include at least one number

     • Include at least one of the following symbols: @, $, !, %, *, &, -, ^ (other symbol characters are not allowed)

     • Cannot contain spaces

   • Confirm Password. If you did not toggle on SSO, this field appears.Confirm the password for the new user.

   • Time Zone. Select a time zone for the new user.

   • Roles. Select and assign one or more roles for the new user. The default roles are:

     • Admin. This role allows access to all permissions in Lucidum and is appropriate for the users who administer Lucidum.

     • Api_Users. This role is allows access to the Lucidum API.

     • IT Operations. This role is for IT and security operations staff.

     • Lucidum_Support (Lucidum internal role only). This is a role assigned to Lucidum support staff, to maintain customer systems.

     • Custom roles. You can define custom roles. For details, see Creating and Managing Roles.

4. Click Confirm to save the new user.

Edit a User Account

To edit an existing user account:

To create a new user account in Lucidum:

1. Navigate to Settings > User Management.

   

2. Find the user account you want to edit and click the Edit link.

3. In the Edit User modal page, you can edit one or more fields.

   

4. In the Edit User modal page, you can edit:

   • Name. Name of the new user.

   • Email. Email address of the new user.

   • Time Zone. Select a time zone for the new user.

   • Roles. Select and assign one or more roles for the new user. The default roles are:

     • Admin. This role allows access to all permissions in Lucidum and is appropriate for the users who administer Lucidum.

     • Api_Users. This role is allows access to the Lucidum API.

     • IT Operations. This role is for IT and security operations staff.

     • Lucidum_Support (Lucidum internal role only). This is a role assigned to Lucidum support staff, to maintain customer systems.

     • Custom roles. You can define custom roles. For details, see Creating and Managing Roles.

   • Status. Toggles the account from active to deactivated.

   • SSO User. Toggle on if you want to use your existing SSO solution for the new user. For details on enabling SSO in your Lucidum system, see Enabling SSO.

   • Client ID. Value required for API access.

   • Secret. Value required for API access. Click Generate ClientID/Secret to generate this value.

   • Token. Value required for API access. Click Generate Token to generate this value.

5. Click Confirm to save your changes.

Generating a Bearer Token

To authenticate with the Lucidum API v2, use a bearer token. The bearer token allows a Lucidum account to access the Lucidum API. You can generate the bearer token from the Lucidum UI.

Lucidum does not support SSO access for the Lucidum API.

To generate the Token:

1. Go to Settings > User Management.

2. Find your account. Click its Edit link.

3. Ensure that your account is assigned the Role Api_Users.

   

    

4. In the Edit User page, in the Roles field, click API_Users and click the right arrow button.

5. In the Edit User page, click the button Generate ClientID/Secret.

6. Double-click on the Client ID field to copy the value. Save it somewhere safe.

7. Double-click on the Secret field to copy the value. Save it somewhere safe.

8. Click the button Generate Token.

9. Double-click on the Token field to copy the value. Save it somewhere safe. Lucidum will not display this value again.

10. Click the Confirm button.

Delete a User Account

To delete an existing user account:

To create a new user account in Lucidum:

1. Navigate to Settings > User Management.

   

    

2. Find the user account you want to delete.

3. Click the Delete link.