Manage Users

User accounts are created and administered in the User Management dialog box, and then assigned to vaults.

In addition to unique user names and passwords, users are assigned roles. Roles determine whether or not a user can administer the vaults, create folders, add and delete files, or get data. Each role is defined by a set of permissions. Role-based permissions are additive, so a user assigned multiple roles has all the privileges of the assigned roles. A user that does not have any role assigned and does not belong to a group with a role has no access to the vault.

Note: To ensure a secure working environment, it is important to have unique user accounts.

Active Directory Accounts and Windows Authentication

Note: Windows Authentication is available only in the Autodesk Vault Collaboration and Professional editions.

An administrator can create a vault server account with credentials unique to the vault server or import a Windows Active Directory account. By using an Active Directory account, users can log into Autodesk data management clients using their Windows account credentials. Users and groups can then be managed using Windows permissions.

Domain user accounts and domain user groups can be imported to the Autodesk vault server. This allows for accounts to be created using Active Directory information and allows users to log into a data management client without requiring a new account. If a user account or group already exists on the server, it can be promoted to an Active Directory account or group. Likewise, an account or group created by importing an Active Directory account can be disconnected or demoted from the Active Directory domain, making the account or group unique to the server.

You cannot manage Active Directory accounts through the server console. You can only import Active Directory accounts, promote server accounts to the Active Directory domain, or demote Active Directory accounts to standard server user accounts. To manage Active Directory user accounts and Active Directory group membership, you must use the User Accounts controls in the Windows Control Panel.

Manage Users

Note: You must be assigned the role of Administrator to perform this operation.
  1. Select Tools  Administration Global Settings.
  2. In the Global Settings dialog, select the Security tab.
  3. Click Users.
  4. In the User Management dialog, you can list user accounts three different ways:
    • Select View  List to view the user profiles in a flat list.
    • Select View  By Vault to view the user profiles as a list grouped by the vaults to which they are assigned.
    • Select View  By Role to view the user profiles as a list grouped by roles.

Add a New User

    Note: You must be assigned the role of Administrator to perform this operation.
  1. Select Tools  Administration Global Settings.
  2. In the Global Settings dialog box, select the Security tab, and then click Users.
  3. In the User Management dialog box, click New User.
  4. In the New User dialog box, enter the information for the new user:
    • First Name
    • Last Name
    • User Name
    • Email
  5. Enter a password for the user and then confirm it.
  6. Click Roles and assign one or more roles to the user.
  7. Click Vaults and select one or more vaults for the user to access.
  8. Click Groups and assign the user as a member of one or more groups.
  9. Select the Enable user check box to activate the account. If the check box is not selected, the account is not available for use and can be enabled later.
  10. Click OK.

Edit a User Profile

    Note: You must be assigned the role of Administrator to perform this operation
  1. Select Tools  Administration  Global Settings.
  2. In the Global Settings dialog box, select the Security tab, and then click Users.
  3. In the User Management dialog box, double-click the profile for the user.
  4. In the User Profile dialog box, edit the information for the current user.
  5. To edit the password, enter a new password and then confirm the new password.
  6. Click Roles to edit the roles of the user.
  7. Click Vaults to edit the user's access to vaults.
  8. Click OK.

Edit Your User Profile (Current User)

    Note: This feature is available only in the Autodesk Vault Client.
  1. Select File  User Profile.
  2. In the User Profile dialog box, edit the information for the current user.
  3. To edit the password, enter a new password and then confirm the new password.
  4. Click OK.
    5. Note: The User Profile dialog box can also be accessed by clicking the user name displayed in the lower right corner of the main application window.

Grant Vault Access

  1. Select Tools  Administration  Global Setting.

  2. In the Global Settings dialog box, select the Security tab, and then click Users.

  3. To grant a user access to one or more vaults for the first time, click New User.

  4. In the New User dialog box, click Vaults.

  5. In the Add Vaults dialog box, select one or more vaults, and then click OK.

  6. To edit access to a vault, double-click a user's profile in the User Management dialog box.

  7. In the Edit User dialog box, click Vaults.

  8. In the Vaults dialog box, select or cancel the selection of one or more vaults, and then click OK. 

Grant Vault Access to a Group

  1. Select Tools  Administration  Global Settings.

  2. In the Global Settings dialog box, select the Security tab, and then click Groups.

  3. To grant a group access to one or more vaults for the first time, click New Group.

  4. In the New Group dialog box, click Vaults.

  5. In the Add Vaults dialog box, select one or more vaults, and then click OK.

  6. To edit access to a vault, double-click a group's profile in the Group Management dialog box.

  7. In the Group dialog box, click Vaults.

  8. In the Vaults dialog box, select or cancel the selection of one or more vaults, and then click OK.

Add a New Vault Server User Account

  1. In the User Management dialog, click New User.
  2. In the New User dialog box, enter the information for the new user:
    • First Name
    • Last Name
    • User Name
    • Email
  3. Enter a password for the user and then confirm it.
  4. Click Roles and assign one or more roles to the user.
  5. Click Vaults and select one or more vaults for the user to access.
  6. Click Groups and assign the user to one or more groups.
  7. Select the Enable user check box to activate the account. If the check box is not selected, the account is not available for use and can be enabled later.
  8. Click OK.

Import an Active Directory Domain User Account

Note: Windows Authentication is available only in the Autodesk Vault Collaboration and Professional editions.
  1. In the User Management dialog, select Actions  Import Domain User.
  2. In the Select Users dialog, click Locations to specify the domain containing the Active Directory accounts to import. In the Locations dialog, select the domain to use and then click OK.
  3. In the Select Users dialog, enter the names of the users to add from the Active Directory domain or click Advanced to search for the users.
  4. Once the users accounts have been specified, click OK in the Select Users dialog. The selected Active Directory domain user accounts are added to the User Management list.

Vault server user accounts imported from an Active Directory domain use the first name, last name, user name, e-mail address, and password associated with the Active directory account and cannot be edited. The domain name is displayed in front of the user name. Changes made to the Active Directory user account are updated in the vault server user account automatically.

Note: Imported users are not automatically assigned to a group, role, or vault unless they are members of a linked Active Directory group. For more information on linking Active Directory groups, see Import Domain Groups.

Promote Vault Server Accounts to Active Directory Domain Accounts

Note: Windows Authentication is available only in the Autodesk Vault Collaboration and Professional editions.

A vault server user account can be promoted to an Active Directory account. Promoting a vault server account to an Active Directory account maps the vault server account to an existing Windows account. Promoting an account replaces the vault server account information with the selected Active Directory account information.

  1. In the User Management dialog, select a vault server user account and then select Actions  Promote to Domain User.
  2. In the Select Users dialog, click Locations to specify the domain containing the Active Directory account to which the selected vault server account will be mapped. In the Locations dialog, select the domain to use and then click OK.
  3. In the Select Users dialog, enter the name of the Active Directory domain user to which the vault server account will be promoted or click Advanced to search for the user.
  4. Once the user account has been specified, click OK in the Select Users dialog. The vault server account information is replaced with the Active Directory account information and the properties in the vault database are updated with the new user name.

Demote an Active Directory Domain User Account to a Vault Server User Account

Note: Windows Authentication is available only in the Autodesk Vault Collaboration and Professional editions.

A vault server user account that was imported from an Active Directory domain or promoted to an Active Directory domain can be demoted, creating an vault server -only account. Once demoted, the account is unique to the vault server and no longer associated with the user's Windows account.

  • In the User Management dialog, select an Active Directory account and then select Actions  Demote Domain User. When the account is demoted, the domain name is removed from the user name. As a result, the demoted account may collide with an existing vault server account with the same name. If the vault server account name already exists, you are prompted to rename the demoted account.

The vault server account retains the vault server group membership and permissions but is no longer associated with the Active Directory account. The password for the demoted account is reset to be blank.

Note: Once an account has been demoted from the Active Directory, the associated user can no longer log into the vault server using Windows authentication.
Parent topic: Manage Users, Groups, and Roles

Related Concepts

Related Information