Understand the concept of system users, which can be a person or a system, and how they can access the User Interface (UI) only through API keys.
System Users do not have access to the User Interface (UI) and can access only API Keys. System Users can be a person or a system.
User Admins
and
System Admins
can manage System Users, while
Team Setup Admins
can view System Users assigned on a team's details page.
Before you can manage System Users, you must first enable the System User function with an API.
To access the System Users page, follow these steps:
From the Kyndryl Modern Operations Applications dashboard, click the Main menu on the left side, and select
User Access
; you will be redirected to the User Access Management page.
Select the
System Users
tab.
The System Users tab is for setting up and managing System Users. Authorized users can perform the following tasks through the System Users tab:
Add a system user
View and edit a user
Add a system user to a team
Unassign a system user from a team
Delete a system user
Bulk delete system users
Generate and regenerate API keys
Revoke API keys
Add a system user
Click
New System User +
.
On the
Create System User
page, enter the following basic system user details:
a. System User ID
b. System User name
c. Description
Status must be set to Active to onboard the new System User.
Click
Add System Role +
.
a. Select the System Role from the dropdown menu.
b. Click
Add
.
Click
Assign Teams
.
a. Select the checkbox beside the team ID for each team that you want to assign.
b. Click
Assign
.
Click
Create
.
System roles can be assigned only to system users and are assigned directly to system users, whereas other roles can be assigned to a system user through a team.
View and edit a user
Click the
overflow menu
at the end of the row of the user you want to view and select
View Details
. The system user's page displays.
You can continue selecting the
overflow menu
or tabs to view all of the available details for the user.
a. Click the
System Role
tab to add or delete system roles.
b. Click the
Teams
tab to add or delete teams.
To make changes, click
Edit
and make any desired changes.
When finished, click
Update
to save your changes.
If removing a team, a dialog window allows you to confirm that you want to remove the team or cancel the action and return to the previous page. For other changes, once
Update
is clicked, the system returns a message stating either that the change was accepted or that there was an error.
Add a system user to a team
From the User Access page, select the
Teams
tab.
Click
Team +
.
When the Teams page displays, scroll down to the
System Users
section, and click
Assign System User(s) +
. The page for
Assign System Users
displays.
Click the down arrow beside the
User(s)
dropdown list, and then click to select the user(s) you want to add to a team. The selected users are shown in the text box above the dropdown list.
Click
Assign Users
. A success message displays the success or failure of the action.
Unassign a system user from a team
On the User Access page, select the
Teams
tab.
Click the
overflow menu
at the end of the row of the team you want to view and select
View Details
.
When the team window displays, scroll down to the
System Users
section.
Click he
overflow menu
at the end of the row of the user you want to unassign from the team and select
Unassign
.
Confirm that you want to unassign the user.
Delete a system user
Click the
overflow menu
at the end of the row of the user you want to delete.
Select
Delete
.
Confirm that you want to delete the System User. A success message displays the success or failure of the action. The System User API Key is also removed.
Bulk delete system users
Select the checkbox(es) next to any system users you want to delete. A
Delete
button displays at the top of the column.
Click
Delete
.
Confirm that you want to delete the System User. A success message displays the success or failure of the action.
Generate and regenerate API keys
Click the
overflow menu
at the end of the row of the system user you want to generate an API key for.
Select
Generate API Key
. The API Key dialog box displays an API Key.
Click
Regenerate
to create a new API Key.
You may use the
Revoke
option here, or you may follow the instructions to Revoke API Keys below.
Once an API Key is generated, it will not be shown again in the UI in order to maintain security. The Admin must regenerate a new Key if the previous key is not known.
In the confirmation window, click
OK
to continue the action, or click
Cancel
to terminate the action. A success message displays the success or failure of the action.
After the key is generated the first time, when clicking the
overflow menu
beside that system user, the options to
Regenerate the API Key
and
Revoke API Key
display.
Click
Regenerate API Key
.
At the API Key dialog window, click
Regenerate
to generate a new API Key. The new Key displays in the API Key text box. A success message displays the success or failure of the action.
Revoke API keys
Click the the
overflow menu
at the end of the row of the system user you want to revoke an API key for and select
Revoke API Key
.
At the Revoke API Key confirmation window, click
Revoke
to revoke the API Key, or click
Cancel
to cancel the action. A success message displays the success or failure of the action.