Things to know about user roles
High-level users
The system supports two types of specially-designated users:
• - Reserved for OpenTech services personnel. This user has access to all accounts and facilities, the ability to create other new OTA Admin users, as well as Account Admin users, and all Security Role permissions.
• Account Admin - Intended for management personnel associated with customer accounts. This user has access to all facilities under the account to which they are assigned. If a new facility is added to an account, Account Admin users assigned to the account automatically inherit the facility. This functionality allows Account Admin users to create or modify their sub-users so they are also associated with the new facility as needed.
Users and sub-users
User administration is based on a hierarchical model in which users who possess the requisite OpenPortal User Management role can create new sub-users. A sub-user manager has the ability to modify the account information, role permissions and activation status of their sub-users as needed. In addition, the following rules apply:
• A given user in an administrative hierarchy has the ability to access and modify their own sub-user account, as well as all child accounts that descending levels of sub-users might create under them in that branch of the hierarchy.
• Users can not assign security roles to a sub-user that they do not themselves possess.
User activity status
Administered users who are added to the system can not be deleted. However, authorized users can change their status from Active to Inactive.
Password rules and management
Passwords must include at least one uppercase character, one lowercase character, and one numeric character. In addition, the password cannot contain the string “password” (in any combination of upper and lower characters).
Users who lose their password can click the Forgot Password link to receive an email that includes a link to an online form that will allow them to change their password. Once the reset password email is sent, the user must update their password before they can access OpenPortal.
However, if a user loses their User Name, an authorized account manager needs to access their account entry to get the information.