User Management
Lanview users are the operator accounts used to sign in to Lanview Studio and perform administration tasks.
When to use User Management
Use User Management when you need to:
- create a Lanview operator account
- update an existing operator account
- enable or disable access for an operator
- reset a user password
- assign or remove roles
- remove an operator account that is no longer required
Where to manage users
Users are managed from Lanview Studio > Security.
Administrators with the required permissions can view users, edit account details, reset passwords and manage role assignments.
Required permissions
| Permission | Allows |
|---|---|
studio.module.security | Shows the Security module in Lanview Studio. |
security.view_users | View users and their assigned roles. |
security.manage_users | Create, edit, enable, disable, delete and reset users. |
security.view_roles | View roles and permission assignments when assigning roles to users. |
security.manage_roles | Manage role definitions and permission assignments. |
Creating or editing a user
To create or edit a user:
- Open Lanview Studio.
- Open the Security module.
- Open the user list.
- Create a new user or select an existing user.
- Update the account details and role assignments.
- Save the changes.
Give each administrator an individual named account and assign only the roles needed for their responsibilities.
Enabling and disabling users
Disabling a user prevents that account from signing in while keeping the account record available for audit and review.
Use disable when an account should no longer be used but its history should remain clear.
Deleting a user removes the account from active user management. Use deletion carefully where audit history and operational review matter.
Password resets
Administrators with security.manage_users can reset another user's password.
A password reset replaces the existing password; it does not reveal it.
Audit behaviour
Lanview audits user administration actions.
Audit records may include:
- user created
- user updated
- user enabled or disabled
- user deleted
- password reset by an administrator
- role assigned to a user
- role removed from a user
- login, logout and rejected login events
Sensitive security administration actions can require an audit reason when reason prompts are enabled.
Console commands
Security authentication commands are available for console use where permitted, including:
security.login [username]
security.logout
security.whoami
security.status
Routine user creation and editing should normally be performed through Lanview Studio.
Good practice
- Use named accounts for each administrator.
- Disable accounts that should no longer sign in.
- Review role assignments regularly.
- Limit user and role management permissions to trusted administrators.