Commander provides account details that you can use to troubleshoot access and permission issues. For example, you can look up users to make sure they will have access to the Service Portal through their AD group membership.
If a user doesn't exist as an individual Commander user or an individual Service Portal user, the following message appears:
No Commander user "<username>" found.
If a user can't be found in the remote directory service connected to Commander, the following message appears:
No remote Directory Services account found for "<username>".
The following account details are available:
- User Account — Shows information about the user's account, roles, and access rights.
- Sessions — Indicates whether the user is currently signed in, and provides the time of the last sign in.
- Organizations — Shows the organizations that the user is a member of, the user's role in that organization, and how membership was granted.
- Commander Directory — Shows membership details for Commander directory accounts.
- Remote User Directory — Shows membership details for remote directory accounts.
To integrate with Active Directory, see Integrate Active Directory with Commander. To integrate with LDAP, see Integrate LDAP with Commander.
View details for a user or group account
Access: | Configuration > Identity and Access |
Available to: | Commander Roles of Superuser and Enterprise Admin |
- From the Users tab, select a user or group.
- Select View Details.
Synchronize account with Active Directory
When an Active Directory user signs into Commander for the first time as a member of an Active Directory group, their account details and group membership are retrieved. If there are changes to the Active Directory user's account after the initial sign in, such as group membership, you can synchronize the Active Directory group in Commander to update the user account's details.
For example, a user is added to Commander as a member of an Active Directory group. At a later date, the same user is removed from the Active Directory group. You can then synchronize the group account to update the group's membership, which will no longer include the removed Active Directory user.
Access: | Configuration > Identity and Access |
Available to: | Commander Roles of Superuser and Enterprise Admin |
- From the Users tab, select a user or group.
- Select Sync with Directory.
