3.4 - Admin Users

You may add, edit and delete users as needed by clicking on the icons under actions

.
It is important to give each users a valid email address. If a user has become disabled you may enabled them by clicking on the 'Lock'

icon. This will reset their password and email it to the email you have specified for this user.

Once you have Configured ampEducator one of the best ways to see what a user can do is to create a "Test User" and login to the system.

Admin User Rights:

Admin User Rights: Admin (or Administrators) have Total Unrestricted Access to all aspects of the ampEducator application. It is important that you minimize the number of users who have admin access to ensure the security of your data and to properly manage the passwords of all your users.

1. Don't share passwords with others. For the same reason -- the password authenticates the identity of the authorized user. Furthermore, the authorized user will be held responsible for misuse of the account if the password is shared.

2. Make passwords hard to guess. Passwords based on personal information easily obtained -- such as account name, actual first or last name, initials of the name, system name, etc. -- are extremely easy to guess and should never be used. Avoid using tricks such as spelling a name backwards or simple substitution of characters. Certain easily-guessed words are also commonly used as (poor) passwords -- such as "guest", "password", "secret", etc. -- and should never be used as passwords.

More secure passwords are those which are based on pass phrases and/or non-dictionary words (including "nonsense" words), combined with obscure character substitutions. These can be extremely difficult to either guess or crack. If your system supports machine-generated passwords, you might also consider using one. Here are some examples of good and bad passwords.

3. Use an 8 character password. By default your ampEducator forces you to use a minimum of 8 characters. Using the maximum number of characters greatly increases the complexity of guessing or cracking passwords.

4. Change passwords regularly. A regular password change is a good idea, since it prevents misuse of your account without your knowledge if your password was somehow accidentally (or deliberately) disclosed.

5. Use different passwords for different accounts, systems and applications. Using a single password is the equivalent of using a single key for your car, house, mail box, and safety deposit box -- if you lose the key, you give away access to everything. If your password is compromised on one system, using different passwords on different systems will help prevent intruders from gaining access to your accounts and data on other systems. For example, system managers should use different passwords for their personal account and their privileged account. If the personal account password is accidentally revealed, the privileged account is still protected. Similarly, a user should use different passwords for their pop email account and interactive logon's. While using multiple passwords increases the difficulty of managing passwords, it results in significant increases in security.

6. Store passwords securely. Until better technologies develop, it's understandable that users will want and need to record their passwords. This is acceptable if password lists are stored in a safe place, such as a slip of paper tucked in the wallet, a floppy disk kept in a locked personal cabinet, or a strongly encrypted file with a good encryption key. In any case, great care must be taken to safeguard the when it is used and to be sure to return it to safe storage immediately after use.

7. Don't leave passwords where others can find them. Don't leave your password on a post-it on your desk or written down in any other places where someone could find it. If you absolutely must write down your passwords, keep them in a secure, locked place. Also, don't leave your passwords where others can find them electronically. Never send them in email, post them to news, leave them online in a file (even in a protected directory), embed them in a script, etc.

Location Admin User Rights: Location Admin users have similar rights as Admin users with some additional restrictions. They can only see the location information that you assign to them and can only manage users for their location. Location Admin also does not have access to Configuration or Program & Course Templates. The Location Admin role is ideally suited for Franchise operations.