Create an Active Directory user - Create an Active Directory user by selecting the Active Directory domain, providing user credentials, and assigning a role and device license.

Automation 360

Create an Active Directory user by selecting the Active Directory domain, providing user credentials, and assigning a role and device license.

Before you begin

Ensure that you are logged in to the Control Room as the administrator.

Note: Before removing a user, administrators should make certain all unfinished development of bots are checked-in.

Procedure

  1. Navigate to Administration > Users.
  2. In the General Details section, enter the following information:
    1. Select Enable User.
      Allows the user to log in immediately after the account is created.
    2. Active Directory domain: Select the active directory name for the user.
      The list displays all the domains that are available in the Active Directory domain controller.
      Note: Control Room Active Directory supports single forest multi-domain environment.
    3. In Username, Click CHECK NAME IN ACTIVE DIRECTORY.
      • If the username is found in the Active Directory database, the First name, Last name, Email, and Confirm email fields are automatically populated. If the fields are not populated, enter the details manually.
        Note: You can use reserved characters, such as the comma (,), in the username.
      • If the username is not found, an error message is displayed. Contact the network administrator to resolve the issue.
      Note: If SMTP is turned on, the user receives a confirmation email at this address. All Control Room notifications are sent to this address. You can use the @ character to accommodate email usernames.

      To support SSO over SAML, the User Principal Name (such as in Azure Active Directory) must match the corresponding username in the Control Room.

  3. Select the required role from the list of Available roles.
  4. Assign a device license to the user.
    See System-created roles.
    Note: When you logged in as administrator, you cannot allocate any device license to the user and None option is selected by default.
    LicensePrivilege
    None The user can access the Control Room only.
    Bot Creator- Development license Enables user to create and run bots. Auto login is enabled by default.
    Unattended Bot Runner - Run-time license Users with this license can perform all automation tasks that attended users can perform. Additionally, this license can also be used for Control Room deployment, centralized scheduling, and API-based deployment.
    Attended Bot Runner - Run-time license Users with this license can run bots on their devices and use any event trigger associated with their user account or role. However, these users cannot schedule bots.
    Citizen Developer - Development license Users with this license can create and run bots (including bots with triggers) on their devices.

    The Bypass legal disclaimer option is automatically enabled to allow the user to run bots on a device without having to manually acknowledge a disclaimer.

    After you select a device license, the Device login credentials are enabled. If you have the Attest device credentials permission, you can choose to attest the device credentials for this user to bypass credential validation when you deploy bots. The Bot Runner user should have an unlocked and active user session.
    Note: This works only if the auto login setting Reuse an existing session is selected in the Control Room by the administrator.
  5. Click Create user.

Results

The Active Directory user is created and appears in the users list. If SMTP is turned on, the user receives a confirmation email at the address entered.