Creating KeyControl Vault for Secrets Local Users

If the vault tenant is configured to use local user authentication, a user account should be created for each user who needs to log in to the KeyControl Vault for Secrets webGUI.

Tenant user passwords are stored in KeyControl, user account details are managed in the KeyControl Vault for Secrets webGUI. Users who want to access multiple vault tenants must have a user account in each tenant. Users must be added to an access control policy before they can access the vault tenant portal.

To read more about access control policies, see KeyControl Vault for Secrets Access Policies.

1. Log into the KeyControl Vault for Secrets webGUI.
2. From the KeyControl Vault for Secrets webGUI, select Security > Users.
3. Click the blue + (Plus sign) to create a new user.

4. Specify the options you want to use:

   Field	Description
   Status	Check this box to enable the account after creation that allows the user to log in to the KeyControl Vault for Secrets webGUI.
   User Name	The login name for the KeyControl Vault for Secrets managed user account. The login name is case sensitive. tenantAdmin, Tenantadmin, and tenantadmin are three different accounts. Important: The login name can contain standard alphanumeric characters, hyphens (-), underscores (_), and periods (.). It cannot contain spaces or other special characters.
   Full Name	The full name of the user associated with the account.
   Email	If your system is configured to send email alerts, they will be sent to this email address.
   Password	Password for the user. The requirements for passwords for local users are the same as for KeyControl local users in general. For more information, see Configuring Local Authentication Settings.
   Confirm Password	Confirm the password of the user.
   Password Expiration	The maximum number of days that a password can be used before it expires. When the password has expired, the user is prompted to change it the next time they log into the KeyControl Vault for Secrets webGUI.

5. Click Add

What to Do Next 

Add the user to an existing access control policy or create a new access control policy so that user can access the KeyControl Vault for Secrets webGUI. See KeyControl Vault for Secrets Access Policies.