Super Administrator Adding

Version

Application Scenario

You can set up a super admin account when you log in to the FineBI system for the first time.

Commonly, multiple individuals share the super admin account in a company to maintain the system.

However, sharing the account may cause issues such as the inability to track logs and assign responsibility in case of problems.

In this case, you can set multiple super admin accounts in FineBI.

Function Description

With the Adding Super Administrators plugin, the super admin can add additional super admins to the system. You can contact our technical support to obtain the plugin.

The newly added super admins have the same system permissions as the default super admin and assist the default super admin in system management.

Plugin Installation

You can contact our technical support to obtain the plugin.

For details, see Plugin Management.

Hierarchical Authorization Enabling

Log in to FineBI as the super admin, choose System Management > Permission Management, click the  icon to go to the Global Setting interface, enable Hierarchical Authorization, and click Save.

Adding a Super Admin

Log in to the FineBI system as any super admin, choose System Management > User Management > Super Administrator (added through the Adding Super Administrators plugin installation), click Add Super Administrator, configure the super admin information, and click OK.

Note:

1. Besides the default super admin, each FineBI system allows adding up to three additional super admins. Add Super Administrator will be grayed out if there are more than three super admins to add.

2. All super admins can perform Add Super Administrator.

The following table shows specific settings.

Settings	Mandatory or Not	Description
Username	Required	User ID The username cannot be the same as the names of existing super admins or users. After you save the username, you cannot modify it. FineBI of V6.0.14 and later versions disallows the following contents: 1. Illegal characters: quotes, <, >, and &. 2. XSS-injected keywords: /script, javascript:, and onblur. 3. Command execution keywords: getRuntime, ProcessBuilder, and java.lang.ProcessImpl. FineBI of versions earlier than V6.0.14 allows only letters, Chinese characters, numbers, underscores, @, hyphens, and dots. Note: Since you cannot modify the username, set the username carefully.
Name	Required	Name refers to the name of a user. Duplicate names are allowed. FineBI of V6.0.14 and later versions disallows the following contents: 1. Illegal characters: quotes, <, >, and &. 2. XSS-injected keywords: /script, javascript:, and onblur. 3. Command execution keywords: getRuntime, ProcessBuilder, and java.lang.ProcessImpl. FineBI of versions earlier than V6.0.14 allows only letters, Chinese characters, numbers, underscores, @, hyphens, and dots.
Password	Required	Password refers to the password of a user.
Mobile	Optional	(Recommended) You can bind the super admin with a mobile phone number for receiving notifications, verification, and other information. A valid mobile phone number is required. Mobile phone numbers from Mainland China, Taiwan (China), Hong Kong (China), Turkey, South Korea, Japan, Singapore, and Malaysia can be bound. For countries and regions such as Taiwan (China), South Korea, Japan, and Malaysia, there is no need to add 0 before the mobile phone number or after the area code.
Mailbox	Optional	(Recommended) You can bind the super admin with a mailbox to receive information such as notifications and verifications. Email addresses can contain the characters # and &.

Log in to the FineBI system as any super admin, choose System Management > User Management > Super Administrator, and modify the information of the super admin, as shown in the following figure.

The following table shows specific settings.

Log in to the FineBI system as any super admin, choose System Management > User Management > Super Administrator, and you can delete other built-in super admins, as shown in the following figure.

Note:

Built-in super admins cannot delete themselves or the default super admin.

1. Newly added super admins can log in with built-in authentication without restrictions set by LDAP or HTTP authentication.

2. Disabling Permission Management > Hierarchical Authorization does not affect newly added super admins, but editing operations cannot be performed on the Super Administrator interface.

3. During the system registration, the user limit includes super admins, and the default super admin occupies a quota of the decision-making platform users. The number of super admins can not exceed that of decision-making platform users.

4. Newly added super admins are not listed under User Management > All Users. Any operation related to general users cannot affect super admins. 

Example 1: No operations can be performed on any super admin under User Management > Platform User.

Example 2: You cannot select super admins when configuring users for a role under User Management > Role.

Example 3: Operations such as clearing built-in users or synchronized users do not affect super admins.

Example 4: You cannot select super admins when configuring the permission configuration, as super admins have all permissions.

5. If the system triggers the operation to reset the default super admin, the default super administrator will be reset, and the built-in super admins will be cleared. Example:

Switching encryption algorithms in System Management.

Resetting the super admin account password when the admin forgets the password.

Switching encryption methods when you perform Import User.