This is where the superuser can configure user settings.

Enable Password Reset: If enabled, users can reset their password via email. It's recommended to enable password reset to reduce the frequency of users accidentally locking their accounts due to forgetting their password. (Use with "Max Resets" to specify amount of resets. Only works with non-superusers)

Password Policy: Set the password complexity policy for all users.

Password Expiration (Days): Password expiration in days. Passwords are forced to change after this duration expires. A Zero value disables this feature.

Max Failed Login Attempts: A user's account will be automatically disabled if their failed login attempts exceed this value. A Zero value disables this feature.

Users must now have to be very cautious about how many incorrect password attempts are made if “Max Failed Login Attempts” is enabled. It is recommended that the user only attempts 3 tries (with default settings), then contact a superuser admin to help reset their password before being disabled and locked out. If the all the superuser admins themselves are locked out, there is no way to reset the password. A re-installation of DESIGO OPTIC will be required and all users will have to be recreated. You can create a backup of the “user” folder in the var directory of DESIGO OPTIC from time to time to be able to backup the users if needed. If the DESIGO OPTIC instance is registered to Edge2Cloud, then a superuser from there can access DESIGO OPTIC and re-enable the local DESIGO OPTIC users.

It is also recommended to create and use a separate superuser account if using the same username as a credential on a Haystack connector to another DESIGO OPTIC instance or disable this feature. The reason is if the same username is used and the password is changed, the connector will attempt to reconnect until it is successful. These attempts will count against the failed attempts and lock the user out.

Max Activity: The maximum number of activity entries to log per user. When the maximum is reached, the oldest entries are truncated. Setting to zero disables activity logging.

Max Resets: The maximum number of password resets that each user can request per day.