User Access Management on Linux Devices

In contrast to mobile phones, personal computers (PCs) are structured as user-based systems, with user accounts used for logging in and logging off from the devices. The IT Admins require the capability to remotely add and manage these accounts on the devices.

Although we have Shell scripts available to regulate various aspects of user account management, the process involved in creation of a user account may pose a challenge for an average IT administrator. Furthermore, the inconvenience arises from the need to publish a Shell script to a profile or group. To mitigate these issues, Scalefusion now provides efficient utilities at the device level, enabling IT administrators to directly and quickly add users as well as take other actions on them.

This document explains the process of adding and managing users on Scalefusion managed Linux Devices, at device level.

Before You Begin

1. Device should be enrolled with Scalefusion.

2. Latest Linux MDM Agent (Tux) should be installed on the devices.

Adding User(s)

1. Login to Scalefusion Dashboard and navigate to Devices Section

2. Click on the device for which you want to add users. This will take you to the Device Details page.

3. Scroll down and from the left side menus, click on User Management tab.

4. To add user, click on Add User.
   

   

   
   

5. The Add User dialog box will be displayed. Here, enter the following:

   1. User Name: Enter Username

   2. Password: Enter password. Minimum password length should be 8 characters

   3. Group: Select the group to which this user belongs, either Standard or Admin

   4. Hide Account from Login List: If enabled, the user account will not be displayed at the time of login

6. Click on Add User. The user will be created and displayed on Dashboard.

   If a user with the same name already exists, a message will be displayed asking you to choose a different name.

   Usernames can be of maximum 32 characters.

   

Managing Users

Clicking on Add User creates the user on the device.

On the Dashboard, the following details are displayed:

1. User Name: The user account name.

2. Account Type

3. Group: The group the user belongs to (Standard or Admin).

4. Last Logged In: The time when the user last logged in

5. Last Logged Out: The time when the user last logged out

6. Actions: Few actions can be taken on the users added. These are explained in next section.

   You will also see the Total Users and the current logged in user on the device.

   

Actions on Users

When you add a user from dashboard, an hourglass will be displayed in front of the username, under actions indicating it is not yet acknowledged by the agent. In other words, it is in the process of creation.

Once acknowledged, following actions can be performed:

1. User Details: Click on the info (i) icon under Actions. This will bring up a new window displaying all the information on the user. Following details for the user will be displayed:

   1. Username

   2. SID

   3. Sudo User

   4. Host Name

   5. Account Type
      

      

2. Hide User Account: This will hide the user account from the user account list of the Linux Device. You can also unhide the user later.

3. Reset Password: Allows you to reset the password for the user account. To reset,

   1. Click on Reset Password.

   2. This will open the Password Details dialog box. From here, you can view the current password and reset the password if required.

   3. Click on the eye icon to view the current password.

   4. Please enter new password in the password field and click on Reset.

      The current password of a user created on the device, will not be visible on Dashboard

      

4. Delete User: Deletes the user from the device. Deleting the user will remove all the user specific data and apps like user specific downloads, photos or documents and more specifically the user directory. Please note it will not delete files or apps stored at a device level or common location shared across users. Clicking on Delete will bring up a confirmation dialog box. Click on Delete button to delete the user. Please note, you cannot delete the user accounts:

   a. You have enrolled the device with.

   b. Admin account created (if any) from global settings.
   

   All the actions will be executed on device when it is:
   -On
   -Online
   -Not in sleep mode
   

Add users in Bulk

Users can also be added in bulk from Device Groups section. To do so,

1. On Scalefusion Dashboard, navigate to Groups > Device Groups > Devices

2. Click on Actions > General > Add a new User

3. Under this, there will be two options. Click on any one:

   1. Include Subgroups: The user account is added to devices in subgroups also.

   2. Only this Group: The user account is created on devices belonging to this group only, excluding subgroups.

      

4. In the dialog box that opens, select the Platform on which you want to add the user:

   1. All macOS devices

   2. All Windows Devices

   3. All Linux Devices

   4. Check all if you want to add to (a), (b) and (c) above

   5. Enter rest of the details (same as in Add Users dialog box explained in above section)

5. Click on Add
   

   

6. A confirmation dialog box will be displayed. Click on Ok. Please note the user will not be added to devices on which Scalefusion MDM agent is not installed.