A User is someone who has access to Tower with associated permissions and credentials. The Users link (found by clicking on the Settings () menu and selecting Users) allows you to manage the all Tower users. The User list may be sorted and searched by Username, First Name, or Last Name (click on the USERNAME button beside the search field to toggle your sorting preference).
There are three types of Tower Users:
Note
The initial user (usually “admin”) created by the Tower installation process is a Superuser. One Superuser must always exist. To delete the “admin” user account, you must first create another Superuser account.
To create a new user click the button, which opens the Create User dialog.
Enter the appropriate details into the following fields:
Select Save when finished.
Once the user is successfully created, the User dialog opens for that newly created User. This is the same menu that is opened if the Edit () button beside a User is clicked from the Users link within Tower’s Settings (). Here, the User’s Organizations, Teams and Granted Permissions, as well as other user membership details, may be reviewed and modified.
Once a user has been created, you can easily view permissions and user type information by looking beside their user name in the User overview screen.
If the user account is associated with an enterprise-level authentication method (such as SAML, RADIUS, or LDAP), the user type may look like:
If the user account is associated with a social authentication method, the user type will look like:
This displays the list of organizations of which that user is a member. This list may be searched by Organization Name or Description. Organization membership cannot be modified from this display panel.
This displays the list of teams of which that user is a member. This list may be searched by Team Name or Description. Team membership cannot be modified from this display panel. For more information, refer to Teams.
Until a Team has been created and the user has been assigned to that team, the assigned Teams Details for the User appears blank.
The set of Granted Permissions assigned to this user (role-based access controls) that provide the ability to read, modify, and administer projects, inventories, job templates, and other Tower elements are Privileges.
This menu displays a list of the privileges that are currently available for a selected User. The privileges list may be sorted and searched by Name, Type, or Role.
To remove Granted Permissions for a particular User, click the Disassociate () button under Actions. This launches a Remove Role dialog, asking you to confirm the disassociation.