V 0.1Slide 1 Security - User Account How to maintain user account ? Access Control Other Information Configuration  maintain user group and access rights  maintain special team  maintain user account  location access control  unlock account  view user login status Customization  scenario Authorized user

V 0.1Slide 2 Security - User Account Maintain User Account :  Create individual user account and add user to user groups  User account inherits the access rights of the attached user groups  Search user account for modification or deletion  Batch student/parent account creation

V 0.1Slide 3 Security - User Account Create User Account :  Administrator can create user account in the following 2 ways:  Create individual account (create an account for Staff, Student, Parent or Others user type by entering the details manually.)  Create student/parent accounts by batch

V 0.1Slide 4 Select user type Not Applicable for “Others” user type Search User Code Security - User Account

V 0.1Slide 5 Security - User Account Create User Account :  Staff / Student or Guardian(Parent) record should exist for the creation of corresponding types of user accounts.  For Student or Parent account, the student should be an active student. The parent should be the guardian of an active student.  For Staff account, the staff should be an active staff, i.e. his/her employment has not been terminated.

V 0.1Slide 6 Select required user code Specify searching criteria Security - User Account

V 0.1Slide 7 Security - User Account User ID and User Code :  The Student, Parent and Staff user codes can be searched from the corresponding tables. The User Code is used for Data Level Access Control.  Both the User ID and User Code of a student is the Student Registration No.  The User ID of the Parent Account is "G_" + Student Registration No. and the user code is the Student Registration No.  The user code of a staff is the staff Code.

V 0.1Slide 8 Specify user id and general information Security - User Account

V 0.1Slide 9 Security - User Account Add User Account :  Enter account details (fields in red are mandatory)  Password  The password will be encrypted when storing in database (show in the next page).  Password Expiry  Password Expiry Date: The date that the password will expire. 14 days before the expiry of password, the system will prompt user to change the password. By default, the password expiry date is the system date plus the password expiry period in days set in the System Configuration.  Never Expire: Password will never expire.

V 0.1Slide 10 Security - User Account Password Encryption:  Password is encrypted before stored in the database. This protects the system from illegal access to passwords even when a hacker gets into the WebSAMS database.

V 0.1Slide 11 Security - User Account

V 0.1Slide 12 Security - User Account Add User Account :  Login Language:  The default login language (Chinese /English) when the user logins.  User Account Access Time:  Upon login, the system will first check the System Access Time set in System Configuration. Then the system will check the User Account Access Time.  Login is allowed only when the login time falls within the 2 periods.  Non-restrictive 24 hours a day access can be set by clicking on the “24 Hours” radio button.

V 0.1Slide 13 Security - User Account

V 0.1Slide 14 Security - User Account Add User Account :  Account Expiry  User cannot login the account after the account expiry date.  Account can be set to never expire.  When a student departs the school, the corresponding student and parent accounts will expire immediately. However, when a student graduates, the account will expire after the last day of the school year, i.e. 01 September.  When the employment of a staff is terminated, the staff account will expire immediately.

V 0.1Slide 15 Security - User Account

V 0.1Slide 16 Select user group Security - User Account

V 0.1Slide 17 Selected user group attached Security - User Account

V 0.1Slide 18 Security - User Account

V 0.1Slide 19 Security - User Account Built-in user accounts  The built-in system administrator account ‘sysadmin’ has ALL rights of the built-in group of ‘SYSTEM_ADMIN’. In addition, this account has other privileged rights, e.g. its access time to the system is not restricted by the System Access Time Setting. These privileged rights are built in the system.  The built-in assistant system administrator account ‘asysadmin’ has one and only one function right. That is to change the password of the account of ‘sysadmin’. This right is built in the system. However, the system administrator cannot change the assistant system administrator’s password.

V 0.1Slide 20 Security - User Account Modify User Account Information :  Use the Search User Account function to find the user accounts for modifying the account information.

V 0.1Slide 21 Click the link at a User ID to load the “Modify User Account Information” page Specify searching criteria Security - User Account

V 0.1Slide 22 Security - User Account Modify User Account Information :  User accounts of type “Staff”, “Student” or “Parent” cannot be changed to other user types. Only ‘Others’ account can be changed to ‘Staff’ account.  Changes will be effective when the user logins again.  The two special teams (Score Capture Team and Student Data Access Control Team) cannot be attached to the user accounts by this function; but they can be detached here.

V 0.1Slide 23 Modify user information as required User ID cannot be modified Security - User Account

V 0.1Slide 24 Security - User Account Delete User Account :  Use Search function to find the required user account(s) for deletion.

V 0.1Slide 25 Check the box to select the account(s) to be deleted Security - User Account

V 0.1Slide 26 Security - User Account Delete User Account :  The two built-in accounts sysadmin and asysadmin cannot be searched out and hence cannot be deleted from the system.  When a user account is deleted, its group membership will also be removed from the relevant groups.  Deletion will take effect immediately. The deleted account, if logging to the system at the time of the deletion, will be forced to logout from the system at once.

V 0.1Slide 27 Security - User Account Create Student/Parent User Account :  Student and parent user accounts can be created by batch.  The parent user account will be created for the guardian of the student. As each student has only one guardian, only one parent account will be created for a student.  The built-in STUDENT (PARENT) user group will be attached to the student (parent) account automatically.

V 0.1Slide 28 Specify the option for student/parent account creation Security - User Account

V 0.1Slide 29 Security - User Account Create Student/Parent User Account :  Password will be generated by system according to the 4 Password Options:  User ID:  a. Password for student account will be the Student Registration No.  b. Password for parent account will be G_Student Registration No.  c. If a parent has two or more children at the same school, different accounts will be created for the parent with different Student Registration No.

V 0.1Slide 30 Security - User Account Create Student/Parent User Account :  Tel. No:  Password will be the telephone number of the student for student account and the telephone number of the guardian for parent account.  HKID No.:  Password will be the HKID number of the student for student account, and the HKID number of the guardian for parent account.  System Generated  Password will be generated by the system randomly.

V 0.1Slide 31 Security - User Account Create Student/Parent User Account :  If Password option of ‘Tel No’ or ‘HKID No’ is selected and the corresponding information is not available, ‘User ID’ will be used as the password instead.  User accounts will not be generated if they already exist or if there is no student or parent in the class selected.

V 0.1Slide 32 Security - User Account Create Student/Parent User Account :  A student or parent account will automatically expire when the student departs or graduates.  Report listing the accounts generated will be displayed after the account generation if the user chooses to do so. The Account Generation Report can be retrieved from the Repository of the Report Management. Click ESC To Return