Account Properties

IT Asset Management (Cloud)

The Account Properties page enables you to specify or change the properties of an account. This page appears when you click any of the following:

• The Create an account option on the All Accounts page
• An account Name on the All Accounts page
• An account Name on the Unassigned Accounts page.
• The Create a service account option on the All Accounts page.

The Account tab lets you to specify the basic account properties and the role assigned to the account, and the Permissions section enables you view the features accessible to an account.

Account

This section lists the following properties:

Account

For a login using Windows Authentication, this is the login name (or account name). For a login using a third-party single sign-on solution, this is the account ID asserted from the identity provider to the service provider (IT Asset Management). For your cloud implementation, this must be the email address of the operator.

Tip: For MSPs, this must take the form domain\username.

Enter the login name or ID of the account.

Email

The email ID of the account.

Enter the email ID of the account.

Job title

The job title of the person using this account.

Enter the job title of the person using this account.

Name

The name of the account. The account can be a personal or group account. For example, QA_Group.

Enter the name of the account.

Permissions

This section enables you to manage the status and role assignment for this account. To use the features of IT Asset Management, an account must be Enabled and assigned with at least one role. The role assignment determines the IT Asset Management features accessible to an account.

Note: You cannot enable or disable the account's access to one or more features from this page. You can only change the role assignment. The access rights are assigned based on the roles assigned to an account. To change the access privileges for a role, you need to modify the role definition. See Creating a Role.

This section has the following fields:

Status

The current status of the account. To use the features of IT Asset Management, an account must be Enabled and assigned with at least one role.

Select the role status. A disabled account cannot be used to login to IT Asset Management.

Role

The role assigned to this account. A role determines the features accessible to an account. The Web Service role is by default selected for a service account.

Tip: If the operator has been automatically assigned to the Administrator role because of an assertion delivered from a SAML 2.0-compliant single sign-on solution (such as Okta), that role cannot be removed until the custom property is first removed from the SAML identity provider. For more information, see the chapter on Authentication in the IT Asset Management System Reference PDF, available at https://docs.flexera.com/.

Select the role assigned to this account.

You can use this section to manage the account's access to various IT Asset Management features. You can use the accordions (each accordion represents a module) to assign features available in the module to this account. For example, you can click the Applications accordion to view the application features accessible to this account. The feature accessibility table displays the following columns:

• Feature — The name of the feature available within the selected module.
• Allowed access — The check box indicates if the account is allowed to access the feature.
• Enterprise scope — The scope of this account. The enterprise scope is determined by the roles assigned to this account. For example, if this account is assigned with a role that is bound to a location Melbourne, the scope of this account would be Melbourne.
• Role — The name of the role which enables the account to access to this feature.