Create an automation user

It is a good idea to have one or more dedicated user, groups, and roles, as necessary, to handle automation tasks that interact with external products or components of your system:

• Automation roles group sets of permissions to define and to constrain the actions automation users are allowed to perform.

• Automation groups bring together automation users, and they define which platform areas, features, and functionality are accessible to automation users.

• Automation users handle automation and integration tasks – based on the automation role they are assigned and the automation groups they are members of – such as authentication, data exchange through outgoing and incoming feeds, or automatic entity creation as a follow-up action on a specific event.

Create the automation user

To create and to add a new user:

1. In the side navigation bar click > User management > Users > (Create user).
   The user editor is displayed.

To create a new automation user:

1. In the side navigation bar click > User management.

2. Click the Users tab, and then click (Create user) to create a new automation user.
   The user editor is displayed.

Under Create user, define the following configuration settings:

1. In the First name field, enter a name that provides a short description of the automation user and its purpose.
   Example: taxii-sync.

2. In the Last name field, enter a name that provides a short description of the automation user and its purpose.
   Example: between-platforms.

3. In the Username field, enter the designated user name to identify the automation user when it is signed in to the platform.
   Choose a name that helps understand what the automation user does.
   Example: platform-to-platform-connector; platform-splunk-connector.

4. In the Email field, enter an email address associated with the automation user.
   This is the email address the user activation email is sent to, with further details about setting a password for the user and completing the activation process.
   Active users can sign in to the platform and carry out actions, based on their permissions.
   You can use this address to send and to receive automated notifications.

5. You can ignore the Contact info field.

6. Optionally, in the PGP public key field enter the user’s PGP public key, if available.

7. From the Locale drop-down menu, select the appropriate locale settings for the user interface.
   Locale settings affect, among others, the reference time zone to display dates and time.

8. Select the Use system timezone checkbox to override any locale-specific time zone setting with the system-defined time zone.
   If this setting is enabled, the platform retrieves the time from the host server, and it displays it in the format defined in the host server configuration.

9. From the Preferred timezone drop-down menu, select the preferred time zone you want to use to display date and time in the platform for the current user profile.
   This option is available when Use system timezone is deselected.

10. In the Groups section, you can add the user to groups, and you can designate them as members or admins of the groups you assign them to.
    Group membership controls user access to platform data, assets, and resources.

    Users must belong to at least one user group to be able to access the platform data, assets, and resources.

    1. From the Group drop-down menu, select the group you want to add the user to.

    2. From the User type drop-down menu, select whether you want the user to be a Member or a Group admin of the groups they belong to.
       To remove a selection, go to the item(s) you want to remove, and click the cross icon .

    3. Click Add or More to insert new rows or input fields, as necessary, where you can enter additional group membership and user type details.

11. In the Assigned roles section, click the Roles field, and then select one or more available roles from the drop-down menu.

    • Start typing a role name in the autocomplete text input field.

    • Select one or more filtered roles from the matching result list.

    
    To remove a selection, go to the item(s) you want to remove, and click the cross icon .
    To remove all selections at once, click the cross icon next to the drop-down menu arrow in the input field.
    Alternatively, click Unselect all options.
    
    The Roles field works like Groups, the only difference being that instead of adding the user to one or more groups, this option assigns one or more roles to the user.
    Roles enable controlling what actions users are authorized to carry out in the platform, and which platform objects they can act on.

12. To access additional save options, click the down arrow on the Save button:

    • Click Save and new to save the current data or configuration for the item you are working on, and to create a new item of the same type right away.
      For example, a new dataset, feed, policy, rule, task, or workspace.

    • Click Save and duplicate to save the current data for the item you are working on, and to create a new prepopulated copy of the same item, which you can use as a template or a blueprint to speed up repetitive manual work.