CHAPTER 5
USER MANAGEMENTS
Outline
Issues
User registration
Local and network accounts
Account policy
User support services
Controlling user resources
Issues
Issues: In the context of user management, "issues" refer to the various challenges and
obstacles that organizations encounter when managing user accounts and access to their
systems.
These issues can include:
User Authentication: Problems with ensuring that only authorized users can access the system, often
arising from weak passwords, outdated security protocols, or vulnerabilities in the authentication
process.
Data Privacy and Security: Challenges related to protecting user data from unauthorized access,
breaches, and ensuring compliance with data protection laws such as GDPR(General Data Protection
Regulation).
Continue
Account Recovery: Difficulties in providing a secure and efficient process for
users to recover their accounts if they forget their passwords or lose access,
which can lead to frustration and increased support requests.
User Roles and Permissions: Complications in defining and managing
different user roles, ensuring that users have appropriate access levels without
compromising security.
Fraud Prevention: The ongoing challenge of detecting and preventing
fraudulent activities, such as account takeovers or unauthorized transactions,
by monitoring user behavior and implementing security measures.
User Registration
"User registration" is the process through which individuals create an account
to gain access to a system or platform. This process typically involves several
steps:
Information Collection: Users are required to provide certain information,
such as their name, email address, username, and password. The
information collected may vary based on the platform's requirements.
Validation: The system checks the provided information for accuracy and
completeness. This includes validating email formats, checking password
strength, and ensuring that usernames are unique.
User Agreement: During registration, users are often required to agree to
terms of service and privacy policies, ensuring they understand the rules and
how their data will be used.
Cont…
Confirmation: After submitting their information, users typically receive a
confirmation email to verify their identity and activate their account. This step is crucial
for ensuring the legitimacy of the registration.
Onboarding: Once registered, users may be guided through an onboarding
process that introduces them to the platform’s features and functionality, enhancing their
experience and encouraging engagement.
Local Accounts and Network Accounts
Local accounts: refer to user accounts that are created and stored on a specific device or
computer, rather than being managed centrally on a network. There are some
characteristics of local accounts.
Storage: Credentials and user data (such as preferences and files) are stored
directly on the local machine, making them accessible only from that device.
Access: Users with local accounts can log in to their respective machines
without requiring an internet connection or access to a central server.
Management: Administration of local accounts is typically done on the
individual device, and permissions or settings may vary from one machine to
another.
Security: Local accounts can offer a level of security since they are isolated
from network threats, but they may also be more vulnerable to physical access
by unauthorized users.
Use Cases: Commonly used in single-user environments, personal computers,
or situations where centralized management is not required.
Network Accounts
Network accounts, on the other hand, are user accounts that are created and
managed on a centralized server within a network environment. They have their
own features which includes the following:
Centralized Management: User credentials and data are stored on a server,
allowing for easier management and administration across multiple devices
and users.
Access: Users can log in to any device connected to the network using their
network account, enabling access to shared resources and applications.
Permissions and Roles: Network accounts allow for the assignment of specific
permissions and roles, making it easier to enforce security policies and access
controls across the organization.
Scalability: Suitable for larger organizations with many users, as they simplify
user management and can be integrated with directory services (e.g., Active
Directory).
Remote Access: Network accounts often facilitate remote access to
resources, enabling users to work from different locations and devices while
maintaining security and access control.
Account Policy
An account policy is a set of rules and guidelines that govern the creation, management, and
usage of user accounts within an organization or system. Some elements of account policies
are:
Account Creation: Guidelines on how user accounts are created, including required
information (e.g., username, password), approval processes, and any restrictions on
account types.
Password Requirements: Specifications for password strength and complexity, such as
minimum length, the use of special characters, and guidelines for password changes to
enhance security.
Account Lockout: Rules regarding account lockout after a certain number of failed login
attempts, aimed at preventing unauthorized access and protecting against brute-force
attacks.
Cont…
Access Control: Policies that define user roles and permissions, ensuring that users have
access only to the resources necessary for their job functions while protecting sensitive data.
Account Expiration and Deactivation: Procedures for managing inactive accounts,
including automatic expiration of accounts after a period of inactivity and processes for
deactivating or deleting accounts when employees leave the organization.
Monitoring and Auditing: Guidelines for monitoring account activity and conducting regular
audits to ensure compliance with security policies and identify any suspicious behavior.
Compliance and Legal Requirements: Adherence to relevant laws and regulations regarding
data protection and privacy, ensuring that account policies align with industry standards and
best practices.
User Support Services
User support services encompass a range of activities and resources designed to assist users
in effectively utilizing a product or service. These services aim to enhance user experience,
resolve issues, and provide necessary guidance. There are different components of user
support service:
Help Desk Support: A centralized point of contact where users can report issues, ask
questions, and receive assistance. This may involve phone, email, chat, or ticketing
systems.
Technical Support: Specialized assistance for resolving technical problems related to
software, hardware, or network issues. This can include troubleshooting, diagnostics,
and solutions provided by technical experts.
Self-Service Resources: Access to documentation, FAQs, knowledge bases, and tutorials
that empower users to find solutions independently. This helps reduce the volume of
support requests.
Cont…
Training and Onboarding: Programs designed to educate users about the product or service, covering
essential features, best practices, and how to navigate common challenges. This can be done through
workshops, webinars, or online courses.
Feedback Mechanisms: Channels for users to provide feedback about their experiences, suggest
improvements, or report issues. This information is valuable for ongoing product development and support
enhancement.
Service Level Agreements (SLAs): Defined commitments regarding the level of service users can expect,
including response times, resolution times, and availability of support resources.
User Community Forums: Platforms where users can interact with each other, share experiences, ask
questions, and find solutions collaboratively. This fosters a sense of community and can be a valuable
resource for peer support.
Remote Assistance: Tools that allow support staff to access users' devices remotely to diagnose and
resolve issues directly, providing effective and timely support.
Controlling User Resources
Controlling user resources involves managing and regulating access to various system resources and
services to ensure security, efficiency, and compliance within an organization. There are some aspects that
include:
Access Control: Implementing policies that define who can access specific resources (e.g., files,
applications, databases). This includes role-based access control (RBAC), where permissions are
granted based on user roles.
Resource Allocation: Assigning appropriate resources (e.g., storage space, processing power) to
users based on their needs and roles within the organization. This helps optimize resource usage and
ensures that critical applications have the necessary support.
Quota Management: Setting limits on the amount of resources that users can consume, such as disk
space or bandwidth. This prevents any single user from monopolizing resources and ensures fair
usage among all users.
Monitoring and Auditing: Regularly tracking and reviewing user activity and resource usage to
identify potential issues or abuses. Auditing helps ensure compliance with organizational policies and
can detect unauthorized access.
Cont…
User Permissions: Establishing specific permissions for different user actions
(e.g., read, write, execute) to control how users interact with resources. This
minimizes the risk of accidental or malicious actions that could compromise
security.
Session Management: Controlling user sessions to ensure that resources are
accessed securely and efficiently. This includes timeout settings, session limits,
and the ability to revoke access when necessary.
Policy Enforcement: Applying security policies consistently to manage user
access and resource usage. This includes enforcing password policies, access
rights, and compliance with regulatory requirements.
Reporting and Analytics: Generating reports on resource usage and access
patterns to help administrators make informed decisions about resource
management and identify areas for improvement.
End of the Chapter 5
10Q
Question and Suggestion?
Quiz (10%)
1. What is user registration
2. Distinguish local account vs network accounts
3. What is account policy and list at least 3 account policy
4. What is issue in user registration and list at least 3 of issues that
can be faced in user registration