Add a User
You can create a local account on an endpoint from the console. Choose Add user… from the endpoint's ⋮ menu, either on the endpoint page or in the Endpoints list.
Fields
| Field | What to choose |
|---|---|
| Username | Lower-case letters, digits, ., _ and -. At most 32 characters |
| Log in with | SSH key (default) or Password |
| Expires | Never, or a date. Default: 7 days from now |
| Note | Optional, for example a ticket number |
| Log in with | Effect |
|---|---|
| SSH key | The user logs in with a key AuthNull holds. Nothing to manage |
| Password | A random password is stored in the vault and rotated. Rotate every defaults to 30 days |
| Expires | Effect |
|---|---|
| Never | The user stays until you remove it |
| A date | The user is removed from the machine at that time. Choose between 1 hour and 90 days ahead |
Click Add user. The user appears in the Local Users table.
warning
Adding a user grants nobody access. A policy that names the account does. See Policies.
Remove a User
In the Local users table, open the user's ⋮ menu and choose Remove user…. The dialog asks Delete name from host now? Confirm to delete the account from the machine.
Next Steps
- Policies: let people use the account.
- Passwords: rotation and break-glass reveal.
- Sudo in Policies: give the account time-limited sudo.