If somebody has left my firm, how do I disable their account in Teamcity. I only see a delete option. I'll lose the configurations set by the user if I delete him right?
Is there a disable/Deactivate user option?
Currently it is not possible to disable a user. You can watch/vote for the corresponding issue in the bug tracker
The options you have now are:
Remove all roles/permissions of a user
Change user's password
Delete the user. This will not delete user's created items (projects, configurations, etc). The deleted user will be shown as 'unknown' on the UI
Related
I'm working on dashboards now, e.g. employee form. Some users have permissions to delete employee and some are not. Usually these permissions are changed only if user assigned to new type, e.g. from the simple user to manager, so quite rarely (because you can't just give permission for deleting only an employee, you'll have all pack of permissions to delete in other forms too). What is the best approach here:
Disable "delete" button for all the users who don't have permissions and while hovering on it show "Only managers can delete employees, request the permission" with the link to request permission.
Don't show the "delete" button at all for all the users who don't have permission.
Why I'm confused is just because View, Edit and Delete is kinda basic functionality, so not sure it's a good idea to disable "delete". In all other specific actions (that only managers can do) I don't show the buttons, the question is only about these "basic" ones.
After starting ObjectGears the first time I created administrator as the first user. I configured everything with this user and then imported other users.
Now I do not know if I can delete this user. I do not want to lose admin access.
You can delete it. The fact that some account is admin is set in the file web.configu in the parameter AdminLogins. So admin can be anybody who has the account included here.
You can also leave this parameter blank and then nobody will be able to change any configuration in the instance, supposing you also delete model owners.
I am the administartor of TeamCity 9.0 which is my continuous integration server. I have added many users for different projects. They have the permission to manually trigger the build, but they cannot edit the configurations.
Now , I need to add a user so that the user can view the Web UI and get the logs etc ; but he must not be able to trigger the build. In short, the run button in the Web UI should not work for that user or should be invisible. How can I achieve that? Please help me out.
In the default installation, the All Users group only has the Project viewer role associated with it, which only has the View project and all parent projects permission. You'll see the Project developer role by default has the Run build and Stop build permissions, and many more.
What does your permission set up look like, i.e. what group is the user assigned to and what roles are associated with that group.
You can get a sort of "effective permissions" overview for a user on the "Roles" tab of a user, this shows how the user is getting permission for which projects via the groups they are in.
TeamCity provides a built-in role, Project Viewer, that grants users read-only access to projects. You can also create your own roles with permissions tailored for your team. See Administration > User Management > Roles.
Click on Administration on top right corner. Under User Management on left side of the UI, click on Users. Click on the user you want. Under Roles tab select Assign Role. In the pop up select what privilege you want to give to that user for what project.
Check this link https://confluence.jetbrains.com/display/TCD9/Role+and+Permission for knowing about different types of users in TeamCity.
When performing a check-in to TFS, the user name associated with the check-in is DOMAIN\username. When linked to TeamCity, this is visible in TeamCity under the changes heading (Recent History).
The problem is that my users log in to TeamCity using LDAP, so their default VCS username is simply username and I can't see an automatic way to set the default VCS user as DOMAIN\username.
There are too many account to change manually to the correct VCS users so that the My changes functionality works.
Is there no user name style for TFS? Is there another way around this?
You can go to the profile page of a user(TeamCity/profile.html) and change the default user id for all TFS roots to DOMAIN/username.
IF the above steps works for one user, you can update the data in user-related tables in the teamcity database to update it for all users
insert into user_property
values(<user_id>,'plugin:vcs:jetbrains.**tfs**:anyVcsRoot','DOMAIN//username')
I have an application which uses Dirsync to monitor the changes in AD. When I add/remove users to a group, AD creates an event for it. But when I delete a user from AD, it only create a changelog for user deletion. I don't get a changelog for "user removed from a group"
Is there some settings I can enable to view these kind of changes too?
When you delete an user, they are not automatically deleted from the group. Their SID is left lingering in the group membership unless you manually remove it. This happens to access controls as well, if you gave permission for a share to that user, you'll see a SID with no user information left on the share after you delete the user.
My organization adopted the policy of disabling users and moving them to a "Terminated Users" OU with a GPO attached that makes their session unusable if someone managed to re-enable the account. This allows us to avoid dangling SIDs and not have to worry about doing a full audit of group membership every time an employee leaves.
If you wish, you could do an audit once a year where you remove all permissions for a user, then delete the user, but I don't really feel it's necessary.