Skip to main content

Help users (IDA)

Users who are granted rights as help desk users use this module to administer users that have at least one account. This can include:

  • Modifying user profile status

  • Attaching existing IDs

  • Changing passwords

  • Modifying security questions

Note

Console-only users, such as the superuser, do not have access to the Help users (IDA) module or other self-service modules.

In order for help desk users to unlock users accounts via the Help users menu, you must enable the Unlock accounts (PSK) module.

In order for help desk users to manage token via the Help users menu, you must enable the Manage tokens (PSP) module.

To configure options that apply to the Help users (IDA) module:

  1. Click Manage the system > Modules > Help users (IDA) .

  2. Configure the options in Table 1, “Modules > Help users (IDA) options as required.

  3. If required, configure event options, listed in Table 2, “Help users (IDA) module events that launch interface programs.

  4. Click Update to submit the changes.

Table 1. Modules > Help users (IDA) options

Option

Description

ADMIN ATTACH USERS ONLY TO EXISTING ACCOUNTS

When enabled, help desk users can only attach users to existing accounts.

ADMIN ATTACH USERS ONLY TO VALID ACCOUNTS

When enabled, help desk users can only attach users to valid accounts.

ADMIN AUTH USR MANDATORY

When enabled, help desk users must authenticate on behalf of users unless help desk users have been granted the Bypass security questions user access rule.

ADMIN TOKEN CLEAR SET

Allows help desk users to clear or set users’ PINs.

ADMIN TOKEN EMERGENCY

Allows help desk users to toggle Emergency Access Mode for users’ tokens.

ADMIN TOKEN ENABLE DISABLE

Allows help desk users to enable or disable users’ tokens.

ADMIN TOKEN RESYNC

Allows help desk users to re-synchronize users’ tokens.

A RESET EXT

The name of an external plugin program or PSLang script that supplies HTML to the Change passwords page. See Adding new functionality and HTML .

A RESET TO PUSHPASS

Use the Password Manager service (idpm ) to retry failed assisted password changes.