User Management

Lanview users are the operator accounts used to sign in to Lanview Studio and perform administration tasks.

When to use User Management

Use User Management when you need to:

  • create a Lanview operator account
  • update an existing operator account
  • enable or disable access for an operator
  • reset a user password
  • assign or remove roles
  • remove an operator account that is no longer required

Where to manage users

Users are managed from Lanview Studio > Security.

Administrators with the required permissions can view users, edit account details, reset passwords and manage role assignments.

Required permissions

PermissionAllows
studio.module.securityShows the Security module in Lanview Studio.
security.view_usersView users and their assigned roles.
security.manage_usersCreate, edit, enable, disable, delete and reset users.
security.view_rolesView roles and permission assignments when assigning roles to users.
security.manage_rolesManage role definitions and permission assignments.

Creating or editing a user

To create or edit a user:

  1. Open Lanview Studio.
  2. Open the Security module.
  3. Open the user list.
  4. Create a new user or select an existing user.
  5. Update the account details and role assignments.
  6. Save the changes.

Give each administrator an individual named account and assign only the roles needed for their responsibilities.

Enabling and disabling users

Disabling a user prevents that account from signing in while keeping the account record available for audit and review.

Use disable when an account should no longer be used but its history should remain clear.

Deleting a user removes the account from active user management. Use deletion carefully where audit history and operational review matter.

Password resets

Administrators with security.manage_users can reset another user's password.

A password reset replaces the existing password; it does not reveal it.

Audit behaviour

Lanview audits user administration actions.

Audit records may include:

  • user created
  • user updated
  • user enabled or disabled
  • user deleted
  • password reset by an administrator
  • role assigned to a user
  • role removed from a user
  • login, logout and rejected login events

Sensitive security administration actions can require an audit reason when reason prompts are enabled.

Console commands

Security authentication commands are available for console use where permitted, including:

security.login [username]
security.logout
security.whoami
security.status

Routine user creation and editing should normally be performed through Lanview Studio.

Good practice

  • Use named accounts for each administrator.
  • Disable accounts that should no longer sign in.
  • Review role assignments regularly.
  • Limit user and role management permissions to trusted administrators.