User & Role Management

Key features

• User account management
  • User Creation and Registration: Admins can create new user accounts manually.
  • Account Activation/Deactivation: Admin users can enable or disable user accounts as needed.
  • User Activity Insights: Track login history, failed login attempts, and access status.
  • BigFix operator binding: Bind each user to a BigFix operator from which the user inherits device and platform permissions.
• Role-based application access:
  • Role Assignment: Assign one or more custom roles to users, granting them access to appropriate applications, devices, and sites.
  • Granular Permission: Configure specific access levels (Admin, Users, or Read only) and feature rights for the Reporting application when creating or editing a role.
  • Operational permissions: Define what a role or user can do on the platform, such as creating actions or using the Console, WebUI, or REST API. See Permissions reference.
• Authentication and Security
  • Authentication Management: Support for both Local and Identity Provider (IdP) authentication methods
  • Password Requirements: Enforce strong password, including complexity requirements and expiration periods.
  • Profile Customization: Users can view or edit their personal information and update passwords securely.

User management

The User management page provides administrators with a centralized view of all users who have access to the BigFix UI.

To access the page, expand Administration from the side navigation, select Identity Management, and then select the User & Role Management card. By default the Users tab is displayed:

Use the Filter, Column, and Density controls above the user grid to narrow down the list of users, customize the columns that are displayed, and adjust the row spacing. Use the Search by login name field to quickly locate a specific user. For more information, see Table filter, Columns, and Density.

The user grid displays the following details for each user:

Administrators can create new users directly from the Users tab by selecting Create user. The guided flow allows you to:

• Select an authentication method (Identity provider (Idp) or Local).

• Add the user’s basic information and, for local users, the password.

• Define the user as Administrator or Non Administrator, bind the user to a BigFix operator, and assign one or more roles.

• Review and confirm access permissions.

After creation, users appear in the main table where administrators can manage roles, enable/disable access, or delete accounts. For detailed steps, see Creating a new user.

User details and actions

From the Users tab, clicking a Login Name opens the user details page, where administrators can view and manage individual user information.

The Account Status badges indicate whether the account is Enabled or Disabled, and Locked or Unlocked. The actions in the upper-right corner let you Delete the user, Reset password, Edit user profile, and Disable or Enable the account. For details, see Editing user profile.

The user details page is organized in the following sections:

Role management

The Roles tab provides a centralized interface for managing access control across the BigFix environment. Administrators can create new roles, modify existing ones, and associate users based on their operational responsibilities. Each role defines access to specific applications, devices, sites, and permissions.

To access this page, open User & Role Management and select the Roles tab. The User management - roles page is displayed:

The roles grid displays the following details for each role:

From this page, administrators can:

• Create new roles through a guided wizard that includes Devices, Applications, Permissions, Sites, and Summary steps.
• View and manage existing role details, including users, devices, applications, permissions, and sites.
• Select one or more roles using checkboxes and click Delete Role to delete them, if required.

For detailed steps, see Managing Roles.