The section is intended to work with user directory of Active Directory.

Search

Search is located in the Users section

Quick search

Enter your First Name, Last Name, Phone Number or Email in whole or in part in the search bar.

Extended search

Click Extended Search and enter one or more criteria: First Name, Last Name, Phone Number or Email in whole or in part.

User profile

The profile displays the data of an Active Directory user:

• Username - the name used to login to the system.

• Path - LDAP.

• Email - email address.

• Phone - user phone number.

• Photo - user photo from Active Directory (thumbnailPhoto attribute).

Permissions

The user permissions are displayed in the Permissions tab.

The following data is displayed for every permission:

• # - permission number.
• User - the Active Directory user, the permission is given to.
• Account - the account used to start RDP, SSH or web session at the resources specified in the permission.
• Resources - the resources that RDP, SSH or web session can be started at under the account specified in the permission.
• Description - this can be an arbitrary text.
• View account credentials - a permission to view the password or SSH key of the account.

Sessions

All active and finished sessions of the user are available in the Sessions tab.

The following data is displayed for every session:

• User - the Active Directory user who initiated the session.

• Account - the account used to start RDP, SSH or web session.

• Resource - the resource that RDP, SSH or web session is started at under the account.

• Duration - is the session duration.

• Started at  - date and time when the session was started.

• Finished at - date and time when the session was finished.

• State - this displays the current status of the session (active or finished).

Authenticators

The user authenticators are displayed in the Authenticators tab.

Events

The user events are displayed in the Events tab.

The following data is displayed for every event:

• Creation time - date and time when the event was created.

• Code - is the event code.

• Event - is the event description.

• Component - is the Indeed PAM component that generated the event.

• Initiator - is the account that initiated the event generation.

Resetting user authenticator

• Open the user profile and go to the Authenticators tab
• Click  to the right of the required authenticator