Search for Existing User Accounts
Overview
Navigate to Security > Users
The Users security form is used to create and manage User accounts for Aeries. The column headers can be sorted by clicking on them, and filtered with the filter icon.
Each account created must have a Type associated with the account. It is important to select the right account Type with each account created so that the proper permissions are associated.
There are currently eight account Types that can be used when creating an Aeries account.
Admin - An unrestricted User who can maintain all Admin level functions and configurations. If an account has a type of Admin, no permissions can be assigned since it automatically has full permissions to all forms and functions in Aeries.
User - Standard User for Aeries. Specific permissions or groups must be assigned, and explicit access to Schools is required.
Teacher - Account type for Teachers to use the Teacher Portal. An account with this Type inherits security permissions from the Teachers Portal Group which can be set up under the Portal Group security area. This type of account also needs to be associated with a valid Staff ID number. School assignments are not needed for Teachers, since they inherit school assignments from the Staff ID. In addition to Portal Group permissions, Teacher type accounts can be given additional Group and User permissions.
Substitute Teacher - Account type for Substitute Teachers to use the Teacher Portal. An account with this Type inherits security permissions from the Substitute Teachers Portal Group which can be set up under the Portal Group security area. This type of account needs to be associated with a valid Staff ID number. Substitute Teacher accounts can be generated through the Create Substitute Teacher Accounts form. In addition to Portal Group permissions, Substitute Teacher type accounts can be given additional Group and User permissions.
Active Directory Admin/User/Teacher/Substitute Teacher - Active Directory type of accounts have the same features as account types listed above. Usernames entered must match the User name specified in Active Directory. Ex: ABCUSD\username. No password is needed for these types of Users.
Add a New User Account ↑
To add a new account, click Add.
This example is of a Type of User. Enter the account information and then click the Update button.
ID – This number is automatically assigned by the system.
Type – The type of account.
Identity Provider – Identifies if the account is authenticated through the Aeries system or use Google Authentication.
User Name – This should be a unique name that is associated with an individual account. Ex: jsmith
Expiration Date – Date for the account to expire. When the date has passed and a User attempts to log in, they see a message on the Login screen that the account has expired, and they are unable to log in. This is optional.
Status – Currently you can tag a status of Active, Locked, Disabled or Pending. When a User is given a status of Locked, Disabled or Pending, the User cannot log in.
Password – Enter a password. This field is grayed-out when the Identity Provider is Google, or account type is Active Directory. You must also enter the password again into the Confirm Password field.
Must Change Password – When checked, Users are prompted to change their password the next time they log into Aeries. Setting a password to “welcome” also prompts the User to change their password.
Password Last Changed - Shows the date the password was last changed.
Login Count - Shows the total amount of logins since the account was created.
Staff ID – A Staff ID is required on accounts that are a Type of Teacher. The list of names to choose from comes from the STF table. Populating a Staff ID for all Users is recommended.
First Name – Enter the User’s first name. This is optional.
Last Name – Enter the User’s last name. This is optional.
Email Address – A valid email address is highly recommended since it is required in order to run reports.
Last Login Date/Time – Shows the last time the User logged in.
Last Login IP – IP address of the computer the User last used to login to Aeries.
IO Education ID – For Users that already have a login ID for Student Assessment by IO Education (formerly EADMS). Entering the login in this field allows Users to Single-Sign-On directly into the Student Assessment by IO Education system.
STARS ID – For Users that already have a login ID for School City STARS. Entering the login in this field allows Users to Single-Sign-On (SSO) directly into the STARS System.
Google Account – The Google Account for this User, if different from the Email Address field. This is currently used to identify a Teacher’s Google account for Google Classroom integration if the District prefers to populate a primary email address other than the Google account.
Comment – A comment can be entered regarding the User.
After an account is created, the Users form shows three additional icons: Permissions, School Access, and Groups.
After initially creating User account types, the School Access icon is red. This indicates the need to assign School access to that User.
School Access ↑
Accounts with a Type of Admin have automatic full access to all Schools and do not need to be assigned School access.
Accounts with a Type of Teacher or Substitute Teacher have automatic access only to the Schools associated with the Staff ID that is connected to their account and do not need to be assigned School access.
Accounts with a Type of User must have their access to Schools defined. To assign access for User accounts, click the School Access icon.
The following form displays with a list of all the Schools that are in the LOC table. Select the check box under the Access column of the School(s) the User is allowed to access. Multiple schools can be selected for a User account.
To grant access to a School for a User account as Read only, check the Access and Read Only options for the appropriate School.
For Districts using the Aeries Communications system, there is a column labeled CommGroup that defaults to checked whenever Access is checked. The Aeries Communications system uses this option to manage which Users are included in School-level groups.
NOTE: The School Access selections are saved automatically. There is no Save button on the form.
Group Associations ↑
Group Associations are used for accounts of any type except Admin. The recommended method of assigning permissions to a new User account is to assign a Group Association to the account. A Group Association connects previously set up Group permissions to the User account. This alleviates the tedious management of setting up permissions individually for each User. To associate Group permissions to a User account, click the Groups icon.
The following form displays. To add the User as a member of an existing Group, click the Group name from the list.
The form now displays the name of the Group associated under the Group Name column to the left. To remove a Group association, click the X next to the Group name.
Changes save automatically.
Permissions ↑
The Permissions icon can be used for accounts of any type except Admin. This can be used in conjunction with a security Group. An example would be a User account being part of a Group whose members have no permission to a specific form. This one user in the Group needs permissions to that form. To handle this scenario, the User can be added to the Group membership, then on the Permissions form the permission to the additional form can be granted for this one User account.
To assign permissions, click the Permissions icon. The Display Current Permissions checkbox defaults to on. When creating a new account, no permissions display initially. Uncheck this option to display all security areas.
The form expands and displays all security areas along with check boxes for each permission type suc has Read, Insert, Update, and Delete.
Read – Allows Users to read the data on the form.
Insert – AllowsUsers to insert or add data on the form.
Update – Allows Users to update or change data on the form.
Delete – Allows Users to delete data on the form.
Mass Update – Allows Users to mass change data
Administer - Special permissions for certain tasks (covered here)
Expiration Date - Used to temporarily elevate a User’s permission. Permissions automatically expire at the end of the date specified. Read permissions do not expire.
These boxes are used to assign which permissions the User is allowed for each area. To set permissions for the User, click the appropriate permission boxes for each area. If no permissions are to be granted for an area, leave all that area's corresponding boxes unchecked.
Depending on the number of School years available in your Aeries configuration, there are tabs for the Current Year, Last Year, and Before Last Year. To give a User access to prior year databases, permissions must be assigned on those additional tabs. If no permissions are specified for prior years, the User only has access to the current year.
NOTE: If permission to a form is not granted for a User, they won't see that form on the navigation menu.
To deny certain permissions to a form, click twice on the appropriate permission box. A red X now displays in the box, and the corresponding permission is denied to the User.
NOTE: When a User is given both Allow and Deny permission to the same area, the Deny permission takes precedence. For example, a User may have Allow Update access to Attendance through a Group membership, but Deny access at the User level. In this case, the user is denied Update to Attendance.
Once all permissions have been set for the User, select the Display Current Permissions checkbox. The form now only displays the permissions that have been assigned to the User, hiding any that have been unassigned.
NOTE: The permissions selected are saved automatically. There is no Save button on the form
To assign additional permissions for a User, deselect the Display Current Permissions option to again view all Aeries security areas.
Search for Existing User Accounts ↑
Once accounts have been created, the Users form can be used to search for existing accounts. To search for an existing account, type the first name, last name, username, or staff ID in the text box and then click Search. Any matching account appears under the User Name column. Click a record shown in the results to view information for that account. If there are many results, the navigation arrows at the bottom of the form are available.
Change A User Account ↑
After searching for an existing account, an Administrator can make changes to an account by clicking the name of the account in the results list.
The Account Information form displays. To make a change to the account, click the Change button and make any necessary modifications. Click the Update button to save the changes.
To Delete an account, click the Delete button. The following message displays. To confirm the deletion of the account, click the OK button.
Emulating a User↑
Aeries has a feature that allows an Admin User to login as or emulate another User. After searching for the User, click on the User, then click the Log in as User button to emulate the User.
If the current School is not available to the emulated User, you are prompted to select which School to log in to. Click Continue if prompted.
You are now emulating the User, and can navigate and view Aeries as if you were the actual User. This is useful when needing to verify security is set correctly for a specific User.
To return to your account, click the Return to My Login button in the upper left of the navigation menu.
Emulating Parent/Student accounts is also possible. To emulate a Parent or Student account, navigate to School Info > Portal Management > Manage Parent/Student Accounts and click on the Emulate this Account icon ("person" icon) to emulate the account. Parent and Student accounts are covered in more detail in the Parent and Student Account Management documentation.