Super Administrator Adding

Version

Application Scenario

You can set up a super admin account when you log in to the decision-making platform for the first time.

Generally, multiple individuals share the super admin account in a company to maintain the project.

However, sharing the account may cause issues such as the inability to track logs and assign responsibility in case of problems.

In this case, you can set up multiple super admin accounts in the decision-making platform.

Function Description

With the Add Super Administrator plugin, the super admin can add additional super admins to the system.

The newly added super admins have the same system permissions as the default super admin to assist the default super admin in system management.

Installing the Plugin

You can obtain the plugin at https://community.finereport.com/plugin/?id=91.

For details about how to install the plugin in the designer, see Designer Plugin Management.

For details about how to install the plugin on the server, see Server Plugin Management.

Enabling the Hierarchical Authorization

Log in to the decision-making platform as the super admin, choose System Management > Permission Management, click the  icon to go to the Global Setting page, enable Hierarchical Authorization, and click Save.

Adding a Super Admin

Log in to the decision-making platform as any super admin, choose System Management > User Management > Super Administrator (added through the Add Super Administrator plugin installation), click Add Super Administrator, configure the super admin information, and click OK.

Note:

1. Besides the default super admin, each decision-making platform allows adding up to three additional super admins. The Add Super Administrator button will be grayed out if three super admin accounts have been added to the decision-making platform.

2. All super admins can perform the Add Super Administrator operation.

The following table shows specific settings.

Settings	Required or Optional	Description
Username	Required	User ID The username cannot be the same as the names of existing super admins or users. After you save the username, you cannot modify it. Starting from FineReport V11.0.20, the following characters and keywords are disallowed: 1. Illegal characters, including quotes ("), <, >, and &. 2. XSS-injected keywords, including /script, javascript:, and onblur. 3. Command execution keywords, including getRuntime, ProcessBuilder, and java.lang.ProcessImpl. In FineReport of versions earlier than V11.0.20, only letters, Chinese characters, numbers, underscores (_), at signs (@), hyphens (-), and dots(.) are allowed. Note: Since you cannot modify the username of the added super admin, set the username carefully.
Name	Required	Name of a user. Duplicate names are allowed. Starting from FineReport V11.0.20, the following characters and keywords are disallowed: 1. Illegal characters, including quotes ("), <, >, and &. 2. XSS-injected keywords, including /script, javascript:, and onblur. 3. Command execution keywords, including getRuntime, ProcessBuilder, and java.lang.ProcessImpl. In FineReport of versions earlier than V11.0.20, only letters, Chinese characters, numbers, underscores (_), at signs (@), hyphens (-), and dots(.) are allowed.
Password	Required	Password refers to the password of a user.
Phone Number	Optional	(Recommended) You can bind the super admin to a mobile phone number for receiving notifications, verification, and other information. A valid mobile phone number is required. Mobile phone numbers from Mainland China, Taiwan (China), Hong Kong (China), Turkey, South Korea, Japan, Singapore, and Malaysia can be bound. For countries and regions such as Taiwan (China), South Korea, Japan, and Malaysia, there is no need to add 0 before the mobile phone number or after the area code.
Mailbox	Optional	(Recommended) You can bind the super admin to a mailbox to receive information such as notifications and verifications. Email addresses can contain the characters # and &.

Log in to the decision-making platform as any super admin, choose System Management > User Management > Super Administrator, and modify the information of the super admin, as shown in the following figure.

The following table shows specific settings.

Settings	Description
Username	User ID Note: You cannot modify the username.
Name	Name of a user. Duplicate names are allowed. Starting from FineReport V11.0.20, the following characters and keywords are disallowed: 1. Illegal characters, including quotes ("), <, >, and &. 2. XSS-injected keywords, including /script, javascript:, and onblur. 3. Command execution keywords, including getRuntime, ProcessBuilder, and java.lang.ProcessImpl. In FineReport of versions earlier than V11.0.20, only letters, Chinese characters, numbers, underscores (_), at signs (@), hyphens (-), and dots(.) are allowed.
Password	If you forget the password, you can use this function to reset a super admin's password. You can click Generate User Password, and the system automatically generates a new password. You can click Copy Password to copy the new password and send it to a user. Click OK to confirm the modification.
Phone Number	(Recommended) You can bind the super admin to a mobile phone number for receiving notifications, verification, and other information. A valid mobile phone number is required. Mobile phone numbers from Mainland China, Taiwan (China), Hong Kong (China), Turkey, South Korea, Japan, Singapore, and Malaysia can be bound. For countries and regions such as Taiwan (China), South Korea, Japan, and Malaysia, there is no need to add 0 before the mobile phone number or after the area code.
Mailbox	(Recommended) You can bind the super admin to a mailbox to receive information such as notifications and verifications. Email addresses can contain the characters # and &.

Log in to the FineBI system as any super admin, choose System Management > User Management > Super Administrator, and you can delete other built-in super admins, as shown in the following figure.

Note:

Built-in super admins cannot delete themselves or the default super admin.

1. Newly added super admins can log in with built-in authentication without restrictions set by LDAP or HTTP authentication.

2. If you disable Hierarchical Authorization in Permission Management, the newly added super admins will not be affected, but you cannot perform any editing operations on the Super Administrator page.

3. During the system registration, the user limit includes super admins, and the default super admin occupies a quota of the decision-making platform users. The number of super admins can not exceed that of decision-making platform users.

4. Newly added super admins are not listed under User Management > All Users. Any operation related to general users cannot affect super admins. For the following examples:

You cannot perform any operations on any super admin under User Management > Platform User.

You cannot select super admins when configuring users for a role under User Management > Role.

You cannot affect super admins when performing operations such as clearing built-in users or synchronized users.

You cannot select super admins when configuring the permission configuration, as super admins have all permissions.

5. If the system triggers the operation to reset the default super admin, the default super admin will be reset, and the built-in super admins will be cleared. For the following examples:

Switching encryption algorithms in System Management;

Resetting the super admin account password by referring to section "Super Admin Adding" when the admin forgets the password.

Switching encryption methods when you perform the Import User operation.