Managing Users and Groups

About this task

Historian provides default security groups and a user, ihCloudHistAdmin, for the ih_security_admins group. This topic describes how to create more users and add them to groups. You can also delete a user or remove the user from a group.

Procedure

Access the folder containing the uaa_config_tool.exe file. It is provided with the collectors installer. After you install collectors, it will be available in the C:\Program Files\GE Digital\Historian Cloud Config folder by default.
To create a user, run the following command:
```
uaa_config_tool.exe add_user 
-u <username> 
-p <password> 
-s <admin password> 
-t https://<Azure Load Balancer IP>:8080
```
For <admin password>, enter the password that you provided at the time of deployment.
For <password>, enter a value that contains:
- Minimum eight characters
- At least one each of uppercase and lowercase letters
- At least one number
- At least one special character
Tip: To find the Azure Load Balancer IP:
1. Go to the Azure portal.
2. Go to the Resource Group that was specified during deployment.
3. Select the cluster_name-IP to access the resource of type Public IP Address.
4. Select or copy the IP Address.
To add a user to a group, run the following command:
```
uaa_config_tool.exe add_user_to_group 
-g <group name>
-u <username> 
-p <password> 
-s <admin password> 
-t https://<Azure Load Balancer IP>:8080
```
where <admin password> is the password that you provided at the time of deployment.
For <password>, enter a value that contains:
- Minimum eight characters
- At least one each of uppercase and lowercase letters
- At least one number
- At least one special character
Tip: For a list of default security groups, refer to Default Security Groups.

To remove a user from a group, run the following command:

uaa_config_tool.exe remove_user_to_group 
-g <group name>
-u <username>   
-t https://<Azure Load Balancer IP>:8080

To delete a user, run the following command:

uaa_config_tool.exe remove_user
-g <group name>
-u <username> 
-s <admin password> 
-t https://<Azure Load Balancer IP>:8080