Accounts
1. Overview
This article shows you how to add a new user account and manage accounts in Dundas BI. Only administrators have permission to manage accounts.
2. Account types
- Local user - A local user's credentials are stored and managed by Dundas BI.
- Windows user - A Windows domain user can log on via Windows Authentication.
- Windows group - A Windows group account lets any member of the group log on.
- External user - An external user can log on via federated authentication.
- External group - An external group account lets any member of the external group log on via federated authentication.
3. Add a new account
To add a new user account in Dundas BI, go to the main menu and click the Admin button.
This launches the Admin home screen, which presents a categorized list of options on the left. Expand the Account Service category and click Accounts. On the Accounts screen, click Add New.
Fill in the general details for the account, such as:
- Account Type - Choose between a Local user, Windows user, or Windows group account. If federated authentication is enabled, you can also choose External user or External group.
- Name - The name of the account (case insensitive).
- Seat Type - Choose between the following license seat types:
- Standard user - Can create views such as dashboards, reports, scorecards, and slideshows.
- Power user - Can create data connectors, hierarchies, time dimensions, metric sets, and views.
- Developer - Can do everything a power user can do, plus create data cubes and cube perspectives.
- Seat Mode - Indicate whether this account has a reserved license seat or floating seat. This option is available only for user accounts. Windows and external group accounts assign a floating seat to any virtual user they create.
Expand the Options section for additional details for the account, such as:
- Culture - The default culture for this account. Must be a valid IETF language tag, such as en or en-US. This information is included in the configuration of Windows and external accounts, and can only be modified here for local accounts.
- Time Zone - The time zone for the account.
- Explicit Password Expiry Date - If set, takes effect instead of the Days Before Passwords Expire configuration setting. (The Password Never Expires option below takes precedence over the others.)
- Allowed IP Addresses - An IP address or range that the user must log on from unless they log onto the server locally. (Available in Dundas BI 8 and higher.)
- Active Project - The active project for the user account.
- API Account - Indicates this account is used only for API calls and consumes no seats, with no access to the UI or data retrieval calls.
Click Application privileges to allow or deny access to specific functionality or UI elements.
Click the Submit button at the bottom of the dialog to create the account and update the accounts list.
3.1. Windows user and group accounts
The required format of the fields in the Add Account dialog is different for Windows user and Windows group accounts. You need to specify the Windows domain in the Name field.
The advantage of using Windows groups is that you don't have to create a separate user account manually for each and every user. When a user belonging to the Windows group logs on to Dundas BI (via Windows authentication) for the first time, a virtual user account is created automatically within Dundas BI.
3.2. External user and group accounts
External user and group accounts are available only when federated authentication is enabled. These accounts represent users that use an external application to authenticate to log on to Dundas BI.
When selecting an external account, the option Federated authentication providers becomes available. This option provides a list of configured authentication providers. Uncheck Any Federation Provider and select any of the applicable providers in the list.
Similarly to Windows groups, you don't have to create a separate user account manually for each user when in an external group account. When a user belonging to the external group logs on to Dundas BI (via federated authentication), a virtual user account is created automatically within Dundas BI.
4. View the list of accounts
Go to the Admin screen, expand the Account Service category, and then click Accounts to see a list of the accounts in the system.
By default, disabled accounts and virtual user accounts are not listed. Virtual user accounts are accounts associated with an external group or Windows group account. If you want to see disabled or virtual accounts, select the relevant checkbox.
4.1. Edit an account
Select an account from the list and click the Edit icon on the toolbar to open the Account Details dialog. This lets you view or modify the settings for that account. Read-only information concerning the account includes the following:
- Account ID
- Account Type
- Created Time
- Last Log On Time
- Last Log On IP Address
- Log On Count
You will also be able to:
- Set the account's default view (the home screen or a dashboard that appears when the user logs on).
- View and manage the account's active logon sessions and logon history.
- Set the account's custom attributes.
- View the effective custom attributes, those inherited by the account.
- Add the account as a member of an existing Dundas BI user group.
- Access the account's recycle bin and restore files (in Dundas BI version 11 or higher).
- Manage the notifications created by the user.
- Manage the files and folders in the user's personal project (i.e., My Project).
- Promote a virtual user account to a regular user account.
4.2. Impersonate an account
When editing an account as described above in Dundas BI version 11 or higher, scroll to the bottom of the Account Details dialog to click to Impersonate the user. This allows you to confirm the access and experience set up for that user.
Take note of the warning that appears, including that changes you make as the other user will persist, and click to continue. Your current session will be suspended, and you will be brought to the home screen as the other user.
A message will now appear as a watermark at all times to remind you that you are impersonating another user. Once finished performing actions as the other user, Log Off from the main menu on the left to return to your original session as an administrator.
Impersonating sessions will appear with a distinct icon on the Active Logons and Logon History pages. Hover over the icon to see additional details.
4.3. Search for an account by ID
Every account has an ID (a GUID value) associated with it. If you only know the ID of a specific account, you can quickly search for the corresponding account in the Accounts screen by pasting the ID in the Search box.
5. Add another administrator
It is recommended to add each user that needs administrative privileges to the System Administrators group rather than sharing the credentials of a single account between multiple people.
To add another Dundas BI administrator, first create the user account if not already added. Next, edit the account and click Member of to add it as a member of System Administrators. You can also edit the System Administrators group instead and click Members to add the account.