Managing Users

Skip to end of metadata
Comment: Migrated to Confluence 4.0
Go to start of metadata
Table of Contents
Expand all   Collapse all

Overview

Artifactory users management is available from the web UI under Admin:Security:Users.
An administrator needs to create users (unless external authentication, such as LDAP is active) and assign them roles and permissions.

Creating and Editing Users

Create a new user by clicking the New button next to the users table.

Unchecking the "Can Update Profile" checkbox prevents a user from updating his profile details. This can be useful, for example, for creating a shared departmental user, with a signle password shared between all individuals in the same department, while only an administrator can update the password.

When external authentication, such as LDAP, is active you can disable the fallback to using internal password by checking the "Disable Internal Password" checkbox.

Passwords are always stored as hashes or encrypted hashes inside Artifactory.

Administrator Users

An administrator user is to Artifactory like a root in Unix systems. Administrators are not subject to any security restrictions.
It is therefore recommended to create a minimum number of administrators.
You can always create less powerful, per-permission-target, administrators inside Artifactory (that are in charge of a specific repository path). See the permissions management section.

The Default Admin Account

The default user name and password for the built-in administrator user are: admin/password.
You should change the password after the first time you log in.
It is possible to recover the default admin account by following these instructions.

The Anonymous User

Artifactory supports the concept of anonymous users.
A built-in, unmodifiable 'anonymous' user exists in Artifactory, that can be assigned permissions, just as any regular user. A global "Allow Anonymous Access" flag controls whether this 'anonymous' user is active or not, and must be turned on before you can fine tune the anonymous user permissions.
Anonymous access is turned on by default. It can be turned on and off from the Admin:Security:General page:

When the global anonymous access is on, anonymous download requests will be able to download cached artifacts and populate caches, regardless of other permissions definitions.

Users Management

Other users management such as editing, removing and assigning groups to selected users can be done under Admin:Security:Users
Labels:
None
Edit Labels