Add users

To add a new user and optionally assign a domain role, do the following:

Steps:

Important
From the 11.1 Update 9 release, all information displayed in the User Details panel is encrypted. This signifies that sensitive user data, including personal information and account credentials, is now protected through encryption, thereby strengthening user privacy and overall security.

Select Manager → <Admin Domain Name> → Users and Roles → Users.
Click .
The User Details panel is displayed. Fill in the required fields. The fields marked with an asterisk (*) are required fields.
Go to User Credentials section:
1. Type the Login ID. The Login ID parameters that can be used are as follows:
  - 26 alpha: upper and lower case (a,b,c,...z and A, B, C,...Z)
  - 10 digits: 0 1 2 3 4 5 6 7 8 9
  - 6 symbols: . ' : - _ ( ) space
2. For Authentication Type choose one of the following (if available):
  If you have selected the Authentication Type as Local, you will have to fill the Password and Verify Password field.
  - Local — Authenticate locally on Manager.
  - LDAP — Authenticate using an LDAP server. If you select this option, also type the LDAP User DN (distinguished name).
    Use the following format for the LDAP User DN:
```
uid=userName,ou=People,dc=DomainName,dc=com
```
    If using Active Directory, use the following format:
```
userloginname@domain.com
```
    or
```
cn=userName,ou=People,dc=DomainName,dc=com
```
    Use a valid DN, as LDAP authentication may not operate correctly without a valid DN. Consult with your system administrator to obtain the correct DN for your LDAP server.
  - RADIUS — Select one of the following RADIUS authentication protocols. If you select this option, also type a valid RADIUS ID, which will be used for authenticating your settings against the RADIUS server.
    RADIUS using PAP (Password Authentication Protocol)
    RADIUS using the CHAP (Challenge Handshake Authentication Protocol)
    RADIUS using the EAP-MD5 (Extensible Authentication Protocol-MD5)
  - OIDC — Authenticate using an IdP server. If you select this option, also enter the IdP User Name. Consult with your system administrator to obtain the correct user name for your IdP server.
3. The Password must be a minimum of eight (8) characters and maximum of sixty four (64) characters in length, and must contain a combination of numbers, characters, and special characters. Password parameters that can be used are as follows:
  - 26 alpha: upper and lower case (a,b,c,...z and A, B, C,...Z)
  - 10 digits: 0 1 2 3 4 5 6 7 8 9
  - 32 symbols: ~ ` ! @ # $ % ^ & * ( ) _ + - = [ ] { } \ | ; : " ' , . <>? /
    Note
    If RADIUS or LDAP authentication is enabled, you must also select the type of authentication to use for this new user.
    Note
    Trellix strongly recommends that you change the default password for security purposes. For more information on the password control, see Configure password complexity settings.
4. Re-enter the password in Verify Password.
5. [Optional] Select the checkbox Account Locked to disable the user.
Go to the User Details section:
1. The First and Last Name must be a minimum of one (1) character and a maximum of thirty two (32) characters in length. The parameters that can be used are as follows:
  - 26 alpha: upper and lower case (a,b,c,...z and A, B, C,...Z)
  - 10 digits: 0 1 2 3 4 5 6 7 8 9
  - 2 symbols: . space
2. Type the Email address of the user.
3. Type the relevant details, if required for the following fields: Company, Phone, State, Address, and Country.
Go to the Role Assignments section and select the required Roles from the drop-down list. Admin Domain displays the user domain by default.
User Details panel
Click Save.
Select Manager → <Admin Domain Name> → Users and Roles → Users to view the newly added user.