New Super Administrator

Version

Application Scenario

You can set a super admin account when you log in to the decision-making platform for the first time.

Generally, multiple individuals share the super admin account in a company to maintain the project.

However, sharing the account may cause issues such as the inability to track which one to be held accountable just through in case of problems.

In this case, you can set multiple super admin accounts on the decision-making platform.

Function Description

With the Add Super Administrator plugin, you (as the default super admin) can add additional super admin accounts to the system.

The newly added super admins have the same system permissions as the default super admin to assist the default super admin in system management.

Installing the Plugin

You can obtain the plugin at https://community.finereport.com/plugin/?id=91.

For details about how to install the plugin in the designer, see Designer Plugin Management.

For details about how to install the plugin on the server, see Server Plugin Management.

Enabling the Hierarchical Authorization

Log in to the decision-making platform as the super admin, choose System Management > Permission Management, click the  icon to go to the Global Setting page, enable Hierarchical Authorization, and click Save.

Adding a Super Admin

Log in to the decision-making platform as any super admin, choose System Management > User Management > Super Administrator (available after the Add Super Administrator plugin is installed), click Add Super Administrator, configure the super admin information, and click OK.

Note:

1. Besides the default super admin, you can add up to three additional super admins to each decision-making platform. The Add Super Administrator button will be grayed out if three super admins have been added to the decision-making platform.

2. All super admins can perform the Add Super Administrator operation.

The following table shows specific settings.

Settings	Mandatory or Not	Description
Username	Mandatory	User ID The username cannot be the same as the names of existing super admins or users. After you save the username, you cannot modify it. In V11.0.20 and later versions, the following characters and keywords are disallowed: 1. Illegal characters, including ", <, >, and &. 2. XSS-injected keywords, including /script, javascript:, and onblur. 3. Command execution keywords, including getRuntime, ProcessBuilder, and java.lang.ProcessImpl. In versions earlier than V11.0.20, only letters, numbers, underscores (_), at signs (@), hyphens (-), and dots(.) are allowed. Note: Since you cannot modify the username of the added super admin after the user name is saved, set the username carefully.
Name	Mandatory	Name of a user. Duplicate names are allowed. Starting from FineReport V11.0.20, the following characters and keywords are disallowed: 1. Illegal characters, including quotes ("), <, >, and &. 2. XSS-injected keywords, including /script, javascript:, and onblur. 3. Command execution keywords, including getRuntime, ProcessBuilder, and java.lang.ProcessImpl. In FineReport of versions earlier than V11.0.20, only letters, Chinese characters, numbers, underscores (_), at signs (@), hyphens (-), and dots(.) are allowed.
User Password Reset	Mandatory	User password.
Mobile	Optional	Bound mobile number of the super admin, which is used to receive information such as notifications and verifications. You are advised to add a mobile number The added mobile number must be valid. Mobile numbers from Mainland China, Taiwan (China), Hong Kong (China), Turkey, South Korea, Japan, Singapore, and Malaysia can be bound. For countries and regions such as Taiwan (China), South Korea, Japan, and Malaysia, you do not need to add 0 before the mobile number or after the area code.
Mailbox	Optional	Bound email address of the super admin, which is used to receive information such as notifications and verifications. You are advised to add an email address. Email addresses can contain the characters # and &.

Log in to the decision-making platform as any super admin, choose System Management > User Management > Super Administrator, and modify the information of the super admin, as shown in the following figure.

The following table shows specific settings.

Settings	Description
Username	User ID Note: You cannot modify the username.
Name	Name of a user, which can be duplicated. In V11.0.20 and later versions, the following characters and keywords are disallowed: 1. Illegal characters, including ", <, >, and &. 2. XSS-injected keywords, including /script, javascript:, and onblur. 3. Command execution keywords, including getRuntime, ProcessBuilder, and java.lang.ProcessImpl. In versions earlier than V11.0.20, only letters, numbers, underscores (_), at signs (@), hyphens (-), and dots(.) are allowed.
User Password Reset	Function used to reset the user password if you forget the password. You can click Generate User Password for the system to automatically generate a new password. You can click Copy Password to copy the new password and send it to a user. Click OK to confirm the modification.
Mobile	Bound mobile number of the super admin, which is used to receive information such as notifications and verifications. You are advised to add a mobile number. The added mobile number must be valid. Mobile numbers from Mainland China, Taiwan (China), Hong Kong (China), Turkey, South Korea, Japan, Singapore, and Malaysia can be bound. For countries and regions such as Taiwan (China), South Korea, Japan, and Malaysia, you do not need to add 0 before the mobile number or after the area code.
Mailbox	Bound email address of the super admin, which is used to receive information such as notifications and verifications. You are advised to add an email address. Email addresses can contain the characters # and &.

Log in to the FineBI system as any super admin, choose System Management > User Management > Super Administrator, and delete other built-in super admins, as shown in the following figure.

Note:

Built-in super admins cannot delete themselves or the default super admin.

1. Newly added super admins can log in with built-in authentication, which are not subject to LDAP or HTTP authentication.

2. If you disable Hierarchical Authorization in Permission Management, the newly added super admins will not be affected, but cannot perform any editing operations on the Super Administrator page.

3. During the system registration, users whose quantity is limited include super admins, and the default super admin occupies a quota of the decision-making platform users. The number of super admins can not exceed that of decision-making platform users.

4. Newly added super admins are not listed under User Management > All Users. Any operation related to general users will not take effect for super admins. For example:

Any operations performed under User Management > Platform User will not take effect for super admins.

Super admins are not available when you configure users for a role under User Management > Role.

Operations such as clearing built-in users or synchronized users will not take effect for super admins.

Super admins are not available when you configure permissions. The default admin has all permissions.

5. If the system triggers the operation to reset the default super admin, the default super admin will be reset, and the built-in super admins will be cleared. The following lists when the system will trigger the operation to reset the default super admin:

Switching encryption algorithms in System Management;

Resetting the super admin account password by referring to section "Super Admin Adding" when the admin forgets the password.

Switching encryption methods when you perform the Import User operation.