Blocked users¶
The Blocked users module manages the list of accounts that are forbidden to sign in on a domain. A blocked account keeps its rights and its attributes: only its access to the user portal and to applications is prevented as long as the block is active.
The module is reached from:
- the Authentication domains module, through the Blocked users button (the selected domain is pre-filled);
- the direct shortcut in the administration console.
Blocked users list¶
The form opens on a paginated grid filtered by domain.
| Column | Description |
|---|---|
| Name | Blocked account name, preceded by the account icon. |
| Lock date | Date and time at which the block was applied. Local format DD/MM/YYYY HH:MM TP. |
Toolbar:
| Element | Description |
|---|---|
| + (Add) | Opens the block window. Disabled if no domain is available. |
| × (Delete) | Unblocks the selected accounts after confirmation. Multi-selection is supported. |
| Domain | Drop-down list of domains. Only non-anonymous domains are listed. If serial authentication is enabled on the organization, a synthetic entry is added at the top and selected by default. |
| Search | Filters by name substring, 700 ms after the last keystroke. |
| Pagination | 15, 25 or 50 rows per page. |
Execution context
In the /system/ console (multi-tenant cockpit), the domain list is reduced to a single local domain and blocking users is disabled. Only unblocking remains available.
Block a user¶
Click the + button. The form that appears depends on the type of the selected domain.
The window shows two side-by-side lists:
| Area | Description |
|---|---|
| Available users | Non-blocked users of the domain. A search field filters the list in real time (700 ms after the last keystroke). A Select all button is available. |
| Users to block | Accounts that will be blocked on save. |
Drag-and-drop moves the accounts from one list to the other. An account moved back to the left list is automatically unblocked (not just removed from the selection).
admin account safeguard
In the default local domain (id 1), the admin account is removed from the available users list and can therefore never be blocked.
The window is reduced to a single field:
| Field | Description |
|---|---|
| User name | Mandatory. Account name as it appears in the directory. A name made only of spaces is rejected. |
Click Validate to apply the blocks and unblocks computed from the window. If one of the accounts cannot be blocked because it matches the current session, a warning is shown.
Account of the current session
An administrator cannot block the account currently logged in. The attempt is rejected with a warning naming the account concerned.
Unblock a user¶
Select one or more accounts in the main list, then click the × button. A confirmation is asked.
Special cases:
| Situation | Message |
|---|---|
| Permission denied | A delegated administrator who does not have rights on the target account sees the unblock rejected with a dedicated message. |
| Missing entries | If some selected accounts no longer exist on the directory side at unblock time, their names are listed in a post-operation warning. |