# Users

A user can be created within Zadara Cloud Services as a member of a single
account. To access and use Zadara Cloud Services, a user must be assigned to
at least one project within that account via a Zadara Cloud
Services role, and assigned at least one Zadara Cloud Services Policy.

<a id="createusers"></a>

## Creating Users

1. Navigate to the **Identity & Access** > **Accounts** view for the specific
   account for which you wish to create a user.
2. From the bottom half of the view, select the **Users** tab.  This will
   display the currently defined users.
3. From the tab toolbar, click **Create User**.

   ![image1](media/01_Create-User-wizard_User-step-1024x361.png)
4. In the **Create User** dialog, enter the following information:
   1. **Name** – enter a name. All names in an account must be unique.
      It is not case-sensitive.
   2. **E-mail** – enter the user’s email address.
   3. **Password** – enter a password.
      A valid password must satisfy the following currently defined rules:
      - Be at least 8 characters long.
      - Contain at least 1 number, 1 letter, and 1 special character.

      When entering the password, the display on the right will
      dynamically indicate when each password rule has been satisfied.
   4. **Validate Password** – re-enter the password.
5. Click **Next**. The **Permissions** tab displayed.
6. In the **Add Project** field, select a project from the pull-down
   list. You can select any project in the user’s account. You may also select
   multiple projects, one at a time.

   ![image2](media/03_Create-User-wizard_Permissions-step_Member-legacy-role-1024x611.png)
   1. For each project added, enter the following information:
      - **Roles** - select one of the available roles: Member or Tenant Admin.
        This is required for the first project. Default role: Member.
      - **Policies** - Select one or more Zadara Cloud Services Policies.
        The default ZCS policy is FullAccess. This policy grants
        full access to all of the functionality granted to this role prior
        to v5.3.4.
      - **AWS Policies** - This field is optional and need only be populated
        if you want to grant access to AWS APIs.
   2. To add a user to another project, click **Add Project** and enter the
      information above for the new project. To remove a project from the list,
      click the delete icon near the project name.
   3. Click **Finish** to create the new user. The new user is created and is
      displayed in the **Users** tab of the specific account.

## Deleting Users

When deleting a user, this user will no longer have access to Zadara Cloud
Services. Deleting a user only removes the user from the system. It does not
delete the virtual resources that this user created. These resources will
still be accessible to all users with access to the projects for which these
resources were created.

**To delete a user:**

1. Navigate to the **Identity & Access** > **Accounts** view.
2. From the bottom half of the view, select the **Users** tab.  This will display
   the currently defined users.
3. Select the user to be deleted from the displayed list and click **Delete**
   from the tab toolbar. The **Delete User** confirmation notice appears.
4. Click **OK**. A message confirming the deletion of the user project will
   pop-up in the upper right-hand corner of the screen.

## Managing Users Permissions

After a user is created, you can modify the user’s permissions and add/delete
projects assigned to the user.

**To manage the permissions of a user:**

1. Navigate to the **Identity & Access** > **Accounts** view.
2. From the bottom half of the view, select the **Users** tab.  This will
   display the currently defined users.
3. Select the user whose permissions are to be modified from the displayed
   list and click **Manage Permissions** from the tab toolbar. The
   **Manage Permissions for User: <name of selected user>** dialog box is
   displayed.

   ![image3](media/17_Manage-Permissions-dialog_3-projects-same-roledifferent-policies.png)
4. In the **Add Project** field, select a project from the pull-down list.
   The following permissions may be modified.
   - **Roles**
   - **Policies**
   - **AWS API policies**
5. To modify permissions for another project, click **Add Project** and enter
   the information above for the new project. To remove a project from the
   list, click the delete icon near the project name.
6. Click **Finish** to save the modified permissions.

## Modifying Users

After creating a user, you can modify its name, email address and password
expiration status.

1. Navigate to the **Identity & Access** > **Accounts** view.
2. From the bottom half of the view, select the **Users** tab.  This will
   display the currently defined users.
3. Select the user to be modified from the displayed list and click **Modify**
   from the tab toolbar. The **Modify User** dialog box is displayed.
4. The following may be modified:
   - **Name**
   - **Email Address**
   - **Password Expiration** - Enable/Disable
5. Click **Finish**. A message confirming the updating of the user will pop-up
   in the upper right-hand corner of the screen.

## Resetting User Passwords

Once a user is created, the password can be reset by the Tenant Admin user of
the user’s account.

**To reset a user password**:

1. Navigate to the **Identity & Access** > **Accounts** view.
2. From the bottom half of the view, select the **Users** tab.  This will
   display the currently defined users.
3. Select the user whose password is to be modified from the displayed list
   and click **Set Password** from the tab toolbar. The **Set Password** dialog
   box is displayed.
4. Enter the following:
   - **Password**
   - **Validate Password** - re-enter the same password.
5. Click **OK**. A message confirming the successful resetting of the password
   will pop-up in the upper right-hand corner of the screen.
