Platform User Management
Overview
Platform User Management is used to manage operations accounts that can log in to the Platform Admin Console. Every account on this page is a "super administrator" for the platform itself — it can access Tenant Management to create, stop, or delete business tenants, manage other platform accounts, and view all platform-level operations data.
Platform accounts and accounts within business tenants are two completely independent account systems: accounts created in this console can only log in to the Platform Admin Console (the system tenant 100000000). They cannot log in to any business tenant or access business features such as CMDB, Collection, or Monitoring.
Key Features
- Account lifecycle management: Create, edit basic information, reset passwords, enable/disable, and delete accounts that can access this console.
- Mandatory temporary passwords: All new accounts use the temporary-password activation method. The creator delivers the password securely to the operations engineer.
- Quick search: Fuzzy search by username, full name, or email; filter by lock status.
- Bulk cleanup: Select multiple accounts and delete them in one operation.
- Safety protections: Prevents deleting yourself and prevents deleting the platform's initial administrator account.
Page Layout
The page is divided into three areas: the top toolbar, the account list in the middle, and the create/edit dialog that opens as a modal outside the list.
Column Reference
| Column | Description |
|---|---|
| Username | The unique identifier used for login. Cannot be changed after creation. Click to enter the account details page. |
| Lock Status | Whether the account is currently auto-locked due to consecutive failed login attempts. When locked, it must wait for the lock duration to expire before auto-unlocking. |
| Full Name | The account's display name (combination of "First Name" and "Last Name") |
| Used for receiving system notification emails | |
| Source | Local user |
Toolbar
The toolbar sits above the list and provides three global actions:
| Button | Purpose |
|---|---|
| Create | Opens the "Create User" dialog to add a new platform account |
| Bulk Delete | Deletes multiple currently selected accounts (subject to deletion protection rules) |
| Refresh | Re-fetches the latest data |
Search and Filter
| Control | Behavior |
|---|---|
| Search box | Fuzzy search on username, full name, and email (case-insensitive) |
| Lock status filter | All / Locked / Unlocked |
Filter criteria and search keywords can be combined, and results refresh in real time.
Create a Platform Account
Click the Create button in the toolbar to open the Create Account dialog.
Field Reference
| Field | Required | Description |
|---|---|---|
| Username | Yes | The unique identifier used for login. Cannot be changed after creation. |
| First Name | Yes | The account's first name |
| Last Name | Yes | The account's last name |
| No | The user's email | |
| Password | Yes | The account's initial password. Must be changed after login. |
| Confirm Password | Yes | Re-enter the password to confirm |
Field Input Rules
| Field | Rule |
|---|---|
| Username | 3–64 characters; must start with a letter; may only contain letters, numbers, underscores, and hyphens; cannot be changed after creation |
| First Name / Last Name | 1–50 characters |
| Password | At least 8 characters; must include uppercase letters, lowercase letters, numbers, and special characters |
| Confirm Password | Must exactly match "Password" |
Platform accounts carry the highest privileges. Please deliver the initial password through a secure offline channel (e.g., in person, via encrypted messaging) to the operations engineer. The engineer will be required to change the password on first login, preventing the initial password from remaining valid long-term.
Account Details and Editing
Click a Username in the list to enter the account details page, where you can:
- Edit basic information: Modify the full name, email, etc.
- Reset temporary password: After resetting the temporary password, the account is forced to change its password on next login.
- Enable / Disable: Toggle the account's enabled state. When disabled, the account is retained but cannot log in.
Deletion and Deletion Protection
Delete a Single Account
Click the Delete icon in the action column of a row, then click Confirm in the confirmation dialog to delete.
Bulk Delete
Select multiple accounts, then click Bulk Delete in the toolbar. Click Confirm in the confirmation dialog to delete them all at once.
Deletion Protection Rules
The system enforces the following protections on deletion operations — they cannot be bypassed:
- Cannot delete yourself: The currently logged-in account cannot delete itself, preventing accidental lockout.
- Cannot delete the platform's initial administrator account: The seed user "sysadmin" provisioned during platform initialization is protected — deleting it would break the platform's login entry point.
Frequently Asked Questions
Q: Can a platform account log in to a business tenant?
No. Platform accounts are only for logging in to the Platform Admin Console (the system tenant 100000000). If you need to enter a specific business tenant, ask that tenant's administrator to create a separate account for you within the tenant.
Q: What if a platform account forgets its password?
Another platform operations engineer can locate the account on this page, enter the details page, and Reset Temporary Password.
Q: Can I disable a platform account instead of deleting it?
Yes. On the account details page, you can toggle the account's "Enabled / Disabled" state. When disabled, the account is retained but cannot log in. This is suitable for scenarios such as leave of absence or temporary suspension.