Moving/Renaming a User Account

You can move user accounts from one organizational unit to another and from one domain to another one. You can rename user accounts, i.e. change the user ID.

Renaming or moving a user account within the defined organizational structure is possible only if you have the required administrative privileges. You can only rename or move user accounts within your administrative scope. You cannot move or rename the user account that owns the current administrative session.

Before you begin

• Ensure that you have administrative access to OneSpan Authentication Server Administration Web Interface.
• Ensure that you have the Move User privilege assigned.

Moving a user account

To move one or more user accounts

1. Log on to the Administration Web Interface.

2. Locate the user account with one of the following methods:

   • Via the extended search:

     1. Select USERS > Find/manage.
     2. Specify the search criteria according to your needs.
     3. Click SEARCH.

   • Using the fast search:

     1. Type the user ID of the relevant user account in the FIND box on the main page.
     2. Select the USERS radio button.
     3. Click SEARCH.
   • Via the USERS > List tab.

3. Select the user account that you want to move. You can also select several checkboxes to move several user accounts in one step.

4. Click MOVE.

   The Move Users wizard appears.

5. Select the target domain and target organizational unit and click NEXT.

   All selected user accounts are moved to the specified domain and organizational unit.

6. Review the completion status of the move operation and click FINISH.

Renaming a user account

Note that you can only rename one user account at a time.

To rename a user account

1. Log on to the Administration Web Interface.

2. Locate the user account with one of the following methods:

   • Via the extended search:

     1. Select USERS > Find/manage.
     2. Specify the search criteria according to your needs.
     3. Click SEARCH.

   • Using the fast search:

     1. Type the user ID of the relevant user account in the FIND box on the main page.
     2. Select the USERS radio button.
     3. Click SEARCH.
   • Via the USERS > List tab.
3. Click the User ID of the user account that you want to rename.
4. Switch to the User Account tab.
5. Click Move/Rename.

6. Type a new user ID in the User ID field.

   You can also specify a new domain and/or target organizational unit on this page to rename and move the user account in one step.

7. Click SUBMIT.

Additional considerations

• When moving a user account, the respective target organizational unit or target domain must already exist.
• When moving a user account with administrative privileges from one domain to another one, the assigned administrative privileges are retained. However, the administrative scope will be adapted accordingly from the source domain to the target domain. Other domains in the administrative scope will not be affected.

• When moving a user account with administrative privileges down in the organizational hierarchy, the assigned administrative privileges are retained, except for any privileges that no longer apply to the respective hierarchy level.

  • Moving a global administrator account from the master domain to another domain effectively demotes it to a delegated administrator account. The administrative scope is reduced to the target domain.

    The following administrative privileges are revoked:

    • Access Data in All Domains
    • Create Domain
    • Create EMV-CAP Application
    • Delete Domain

  • Moving a domain administrator account to an organizational unit effectively demotes it to an organizational unit administrator account. The administrative scope is reduced to the target organizational unit.

    The following administrative privileges are revoked:

    • Access Domain
    • Set Administration Domains
    • Update Domains

• When moving a user account with administrative privileges up in the organizational hierarchy, the assigned administrative privileges are retained, but no additional administrative privileges are assigned.

  • Moving an organizational unit administrator to a domain changes the administrative scope to the target domain. The user account is not automatically assigned domain administrative privileges!
  • Moving a delegated administrator from a domain to the master domain changes the administrative scope to the master domain. The user account is not automatically promoted to a global administrator!
• When moving a user account with assigned authenticators to another domain or organizational unit, the assigned authenticators are moved along with the user account.
• When moving or renaming a user account with an assigned authenticator with generated offline authentication data (OAD), the existing offline authentication data is invalidated and will be deleted on the server! Upon the next online authentication with the updated user account, new offline authentication data will be generated and retrieved from the server.
• Any user accounts linked to the user account being moved are not moved along, but remain in their original domain and/or organizational unit.