# Managing Administrators

The system provides one default administrator admin. The default administrator has all permissions, can manage all resources, and can log in the ATIC Management center from any IP addresses. To implement permission/domain-specific management of the ATIC Management center, you can create administrators and modify, lock, unlock, or delete them.

Choose System > System Administrators > Administrators, and manage the administrators.

Create | Click to create an administrator. For details about this operation, see Creating an Administrator.
Modify | Click corresponding to the administrator to modify its authentication mode, password, description, associated administrator group, managed resources, and allowed IP address segment. For details about this operation, see Modifying an Administrator. NOTE: The passwords must meet the minimum complexity requirement. That is, the passwords must contain at least three of the following, including upper-case letters (A to Z), lower-case letters (a to z), digits (0 to 9), and special characters (such as !, #, $, and %). The passwords cannot be the same as the user name or its reverse. The administrator password must contain at least 10 characters, and other passwords at least 8 characters. Keep passwords properly and change passwords periodically.
Lock | To restrict the login of an administrator to the ATIC Management center, select the administrator and click to lock the administrator. After the administrator is locked, its status becomes Lock. You can restrict only the next login of the current administrator. NOTE: The current administrator has the permission to lock an administrator. The default administrator admin cannot be locked manually.
Unlock | Select the locked administrator and click to unlock the administrator. NOTE: The current administrator has the permission to unlock an administrator.
Delete | Select one or more administrators and click to delete the selected administrators. NOTE: The current administrator has the permission to delete an administrator. An online administrator and the default administrator admin cannot be deleted.
View | Click the user name of an administrator to view its description, associated administrator group, managed resources, and allowed IP address segment.
Status | A created administrator is in the Unlocked state by default. The administrator will be in the Lock state in the following situations and cannot log in to the ATIC Management center. According to the configured system security policy, the ATIC Management center can automatically lock a user, and the user is unlocked automatically when the specified time is reached or is manually unlocked by the default administrator admin or another administrator who has the unlock permission. For details about this situation, see Configuring the System Security Policy. The default administrator admin or another administrator who has the lock permission can manually lock an illegal user. The user that is manually locked can only be unlocked manually by The default administrator admin or another administrator who has the unlock permission.

- Creating an Administrator
  To implement rights- and domain-based management on the ATIC management center, you can create administrators, add them to administrator groups to obtain the corresponding permission, assign management resources, and configure IP address segments for login to the ATIC management center.
- Modifying an Administrator
  The current administrator can modify the description and permission set of a non-default administrator group as required. When the administrator group has associated users, the permissions of these users will also be modified after the administrator group permission is modified. The modification of user permissions takes effect upon the next login.

Parent topic: Configuring the System Administrators

Copyright © Huawei Technologies Co., Ltd.