2 KiB
2 KiB
| name | description |
|---|---|
| authorization | CI Server R1.03 users, authorization groups, login and schemes. Use when the user wants to create, list or remove CI Server users or authorization groups, choose authorization actions (ITEM_READ, ITEM_MODIFY_VALUE, …), set process areas, logoff timeout or initial display for a user, change how users log in (dssana.sup login method: Automatic, Manual CI Server, Manual OS, No, SSO, Deny; no-login profile CI_NO_LOGIN), hide Engineering Module features with a scheme, or connect CI Server to Active Directory (AD, domain users, security group or OU mapping, directory group, profile priority, AD_INT_ON) and single sign-on for CI View (SSO, SPNEGO, Kerberos, keytab, setspn, ktpass, kinit, krb5.ini). Sources IM 36K10C10-01EN §2, IM 36K10J40-01EN. |
Authorization (R1.03)
Background: knowledge/manuals/IM36K10C10-01EN.md §2 (login methods, actions, user tabs,
schemes), IM36K10J40-01EN.md (Active Directory, SSO). Login settings are in dssana.sup on CI Core (skill portal-setup for reading
and changing setup files).
Rules:
- Run the
system-checkskill first; follow the user's chosen way of working. - Users are login accounts. Claude prepares user quick load files but the user loads them and sets any password; never put real passwords in repo files.
- Remove users before the authorization group they belong to.
| Task | File | Status |
|---|---|---|
| Create, check and remove authorization groups and users (quick load) | tasks/users-groups.md |
verified |
Login methods per client and user interface (dssana.sup, tab Login control); No login = full authorization when the profile user is missing |
tasks/login-methods.md |
verified (read; changes from docs) |
| Schemes (hide Engineering Module features) | C10 summary §2 | from docs |
| Active Directory integration and single sign-on (SPNEGO) | tasks/active-directory.md |
from docs (no domain) |
Password rules (dssana.sup Password rules: length, digits, punctuation, mixed case) |
L50 summary §3 | from docs |