Users and Roles in Aerobase/Keycloak and Nintex Kryon Admin Tool Tool

Users type overview

Nintex Kryon RPA solution and components feature two types of users; Nintex Kryon RPA Admin user, and Kryon client application user.

Admin user:

• A user that can access the Nintex Kryonmanagement component; Nintex Kryon Admin Tool Tool.

• Admin user can create client application users if it has the appropriate roles.

• Admin users can be initially created and managed in Aerobase/Keycloack.

• Once an Admin user is created with the appropriate access role in Aerobase, the same user can create and manage more Admin users directly through the Nintex Kryon Admin Tool Tool.

Client application user:

• A user with different types of access as assigned by the Admin user.

• With the appropriate roles, the client application user can access the Nintex Kryon RPA client applications; Nintex Kryon Console Plus, Studio, an Attended/Unattended Robots.

Creating and managing Admin users

To access and use the Nintex Kryon Admin Tool Tool, you need to create a user on Keycloak Admin Console and assign the user the appropriate roles as described in the table below.

Step 1: Open Keycloak Admin Console / Aerobase by logging in using the Authadmin user credentials as provided in the documentation.

URL format to access the management tool: FQDN/auth/admin/Kryon/console/

EXAMPLE:

Step 2: Go to Manage > Users > Create User and create a user.

Step 3: Click the Role Mappings tab to assign roles to the user as following:

1. Assign the admin-access role (Realm Roles) + Nintex Kryon-admin-tool (Client Roles).

2. Assign one or more of the following Realm roles considering the type of access and permissions each role allows:

Nintex Kryon RPA Admin users are managed under Tools in the Nintex Kryon Admin Tool Tool. The roles available are equivalent to the roles in Keycloak/Aerobase as described above (Step 3 > Role Mapping > b.).

Importing users

To make it easy to create a large number of users at one time, Nintex Kryon Admin Tool allows you to import them from a CSV file. Doing so is a 3-stage process:

1. Download the Import Users file template.

2. Fill in the template with user information.

3. Import the file.

Nintex Kryonapplication users vs. Admin users

Nintex Kryonclient application users are managed under the Users tab (Nintex Kryon Admin Tool Tool > General > Users). Only Admin users with the assigned roles of either admin-permissions or admin-license can manage (create new users and edit existing users) Nintex Kryon client applications users.

Creating a new user

1. In the Menu Pane, click Companies and Users.

2. In the Entities Pane, select the company for which you are creating a user.

3. In the Properties Pane, select the Users tab.

4. Click New User.

5. Enter the required information in the New User dialog then click Save.



6. Enter a username, full name, and email address.

7. Select whether the new user is active.

   Generally, the default value of Active is applicable to new users. However, the user status can be changed at any time.

8. Assign the user to one or more roles.

9. Enter and confirm new password:

   • Password-related fields are not applicable to Domain authentication and will not be visible when this authentication method is used.

   • Passwords require a minimum of 8 characters and must include at least 2 of the following: uppercase letters, lowercase letters, numbers, and symbols.

   • To create a random-generated password, click Generate Password.

   • To copy the password to the Windows clipboard, click the icon.

10. Select whether the user is required to change the password the next time he/she logs in.

    This is often appropriate for human users, but not for unattended robots.

Nintex Kryon client application user roles

Client application roles can be managed directly through the Kryon Admin Tool (recommended). You can also manage the same exact roles through Aerobase/Keycloak. The table below maps out the roles as they appear in the Nintex Kryon Admin Tool Tool and their equivalent roles in Aerobase/Keycloak.

Download the Import Users file template

To download the Import Users file template:

1. Go to Companies and Users and select the Users tab.

2. Click the button.

3. In the dialog box, click the link to Download the Import Users template and select a download location.

   

Import the file

To import the completed Import Users file:

1. Go to Companies and Users and select the General tab.

2. Click the button.

3. In the dialog box, click the Browse button and navigate to the Import Users CSV file you created.

4. Tick the checkbox if users are required to change their passwords the next time they log in.

This is often appropriate for human users, but not for unattended robots

5. Click the Import button.

The users listed in the file are created.