Users on CloudBolt Documentation

Create a user

Mon, 01 Jan 0001 00:00:00 +0000

Administrators, and users with the Manage Group Memberships permission in at least one group, can create users. You can create users directly in CMP, as described below, or sync users from an external directory via LDAP or SSO. For how users, groups, and roles fit together, see Users.

Create a user manually

Go to Admin > Users.
Select Create a new User.

(opens full-size image in a new tab)
Complete the Create a User form.
Select Create.

Grant users access to OneFuse

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

License OneFuse

Add users to the OneFuse group

The Default workspace group and the workspace roles appear only after OneFuse is licensed and initialized.

Log in to CMP as an administrator who can manage users and groups.
Go to Admin > Groups.
Select the group named Default. Its breadcrumb shows Groups / Workspace: Default.
On the Users tab, select Add (+).
In the Add Users to Group Default form, under Roles to grant, assign exactly one workspace role:
- Workspace Admin
- Workspace Member
- Workspace Executor
- Workspace Viewer
Select the users for that role, then select Add Users.

Assign only one workspace role. If a user has any other role in this group, they may not be able to access OneFuse.

LDAP authentication

Mon, 01 Jan 0001 00:00:00 +0000

Add LDAP utility

Set up a connection to your LDAP utility.

Go to Admin > LDAP Authentication Settings.
Select Add.

Complete the Add LDAP Utility form:

Field	Notes
IP Address	IP address or FQDN of AD/LDAP server.
Port	Port to connect to the AD/LDAP server. Defaults are 389 (LDAP) and 636 (LDAPS).
Protocol	Select ldap or ldaps. To use ldaps, LDAPS must be enabled on the directory server. See the OpenLDAP or Active Directory documentation.
LDAP Version	Select Version 2 or Version 3. Contact your directory admin for guidance.
Account	The service account in AD/LDAP that can search for users and, if applicable, join servers to the domain. For Active Directory, use the form `username@domain`.
Password	The password used to authenticate the service account. If the password vault feature is enabled, this field offers Locally Stored or Vault Managed. Select Vault Managed to read the secret from a configured vault provider. See Use password vaults.

Select Save.