7. Console users, roles and your account
Console accounts, Administrator and Auditor roles, AD role mapping and your own account.
Two kinds of people can sign in to the admin console:
- Local accounts, created under Administration → Users, with a password stored (hashed) on the Ada server.
- Active Directory accounts, which sign in with their domain password once the directory is configured (section 6.5) and an AD group or user has been given a console role under Users → Active Directory access.
Every console user has one of two roles: Administrator or Auditor. There is no single sign-on.
In this topic
- 7.1 Roles and permissions
The console shows the role in the user menu ( Administrator or Auditor · read-only ) and next to the user name in the sidebar. For an auditor, forms are disabled, Save buttons are hidden and Publish & Sign is not…
- 7.2 Local console accounts
Administration → Users. The upper card, Local admin accounts , lists every local account. The lower card, Active Directory access , assigns roles to AD groups and users (section 7.3 ).
- 7.3 Active Directory access
The Active Directory access card on Administration → Users decides which AD groups and individual AD users may sign in, and with which role. It appears once a directory is enabled (section 6.5 ).
- 7.4 Your account
The user menu at the bottom of the sidebar shows your initial, user name and role, with Account settings , Dark theme / Light theme and Log Out . The theme choice is stored in your browser.
- 7.5 Sign-in reference
When AD is enabled, Ada tries the directory first and falls back to the local account of the same name. If a sign-in notice is enabled, users must click OK on it before the form appears.