Users

With this method, you can:

• Get a list of all Security Controls users
• Create a certificate for a user so that person is recognized as a valid Security Controls user.

Details About the Create User Request

After a fresh installation or an upgrade from a version prior to 2020.1, only users who have launched Security Controls will be recognized when using the Shared Credentials feature. Rather than wait for all users to launch Security Controls, you can get each user to be recognized by submitting a create user request.

Each user must have Administrator access to the console machine.

Creating a User for Yourself

1. Open an elevated PowerShell session.
   To do this, right-click the PowerShell icon and select Run as Administrator.
2. At the PowerShell prompt, type the following command:
   Invoke-RestMethod -Uri https://<consoleFQDN:port>/st/console/api/v1.0/users/create -Method Post -UseDefaultCredentials

This command will create the user certificate and place it in the Trusted Users certificate store.

3. You can verify that the user is now recognizable by Security Controls by submitting a GET request.
   Invoke-RestMethod -Uri https://<consoleFQDN:port>/st/console/api/v1.0/users -Method Get -UseDefaultCredentials

Creating a User for Others

1. Open a command prompt in which you are running as the other user.
   To do this, at the Windows Start prompt, type runas /user:<domain\user> cmd.exe.

When prompted, type the user's password or ask the user to type their password.

2. Open an elevated PowerShell session.
   To do this at the command prompt, type Powershell -Command “Start-Process cmd” -Verb RunAs.

This will launch a second command window.

3. In the new command window, launch PowerShell.
   To do this, type Powershell.
4. At the PowerShell prompt, type the following command:
   Invoke-RestMethod -Uri https://<consoleFQDN:port>/st/console/api/v1.0/users/create -Method Post -UseDefaultCredentials

This command will create the user certificate and place it in the Trusted Users certificate store.

5. You can verify that the user is now recognizable by Security Controls by submitting a GET request.
   Invoke-RestMethod -Uri https://<consoleFQDN:port>/st/console/api/v1.0/users -Method Get -UseDefaultCredentials
6. Repeat these steps for each user.

Base URL

        https://<consoleFQDN:port>/st/console/api/v1.0/users

Supported Requests

Method	URL	Input	Return
GET	https://<consoleFQDN:port>/st/console/api/v1.0/users		List of users
POST	https://<consoleFQDN:port>/st/console/api/v1.0/users/create		Success code

Input Model

None

Example with Sample Response

Output Models

None