Specifying Security Settings
Use the System Access frame to specify security-related access settings for each user.
User Maintenance, System Access Frame
Active
Indicate whether this user ID can be used to log in to the system. To deactivate an existing user ID, enter No.
Note: Anytime this field is updated, the Active Reason field must also be updated.
Active is updated in the following ways:
• Automatically when you enter a new user ID. By default, the system sets Active to Yes; you must manually enter an active reason.
• Automatically when the system deactivates an account for too many failed log-in attempts. Active Reason is set to the code specified in Security Control. See
Maximum Access Failures.
• Manually when you update an existing ID; for example, you can do this to reactivate a system-deactivated user record, or to deactivate an account when a user leaves the company. You must enter an active reason.
Inactive accounts do not display in most user lookups.
Once a user ID has been used for log-in, it cannot be deleted from the system. If an ID is no longer needed, deactivate it.
Active Reason
Enter a reason code that indicates the reason for modifying the setting of Active. This reason code must be associated with reason type USER_ACT.
You must update this field anytime you change the Active field.
Access Location
Enter a code that associates the user with a major business facility or major business location. If you have more than one facility or location or if users work remotely or in small offices, associate the user with the major business facility or location that is most appropriate.
Access location codes must be defined in Generalized Codes Maintenance (36.2.13) for field usr_access_loc. The system ships with a Primary location code that is used as the default for new user records. You can use this location as your company home office location or central processing site.
Force Password Change
Indicate whether the system should force this user to create and validate a new password the next time they log in to the system using the current password.
The default is Yes for new users and cannot be updated. This lets you assign temporary, single-use passwords either automatically or manually.
The field defaults to No for existing users unless the password has been changed. In that case, it is set to Yes and you cannot update it. This forces users to assign their own passwords at the next log-in.
Use Force Password Change Utility (36.3.23.12) to set this field to Yes for selected users or user groups.
Update Password
Specify whether this user requires a new password. For new users, the field defaults to Yes and you cannot change it.
