In JAMS individual user names are defined and later assigned to JAMS components (e.g., Jobs, Setups and Folders). For example, when a Job is submitted it runs under the specified user name that is ultimately controlled from an access control list (ACL). Each individual access control entry (ACE) consists of one or more identifiers to determine the level of access granted to that user.

When a user attempts to perform a function, JAMS automatically checks if the user can actually perform that function by matching the identifier in each ACE against the identifiers held by the user. When a match is found, the user is granted access. If no matches are found, no access is granted.

Note: to modify a JAMS user definitions you must have the appropriate level of permissions in the ACL to assign or change a user account’s “username” properties.

Adding a New User Name (Username)

As a prerequisite, all JAMS users must be recognized by the JAMS system before they can be assigned an access level. To add a new user name, follow the steps below.

Select the Users Shortcut to open the Users View.
Click the green Add button on the JAMS Ribbon to initiate the JAMS Username Definition Wizard. Click the Next button.
Enter a unique Display Name and optional Description for the new User. Click Next.
On the Logon As page use the file browser button to specify an existing user name that can be authenticated during the log on procedure. If this field is left blank it defaults to the new username (Display Name). Select the Next button.
Enter and confirm the Password for the new user name. Click the Next button.
On the ACL page highlight the username and use the checkboxes to select the appropriate access types described below:

Change: includes permissions to edit the user account details.
Control: provides the ability to edit the user account's access control entry located on the User Definition window (Security tab).
Submit: grants the selected the user account submission capabilities for a Job or Setup.
Get Password: includes permission to obtain a clear-text password using the Get-JAMSCredential PowerShell cmdlet or via the .NET API.

Select the Finish button to complete the User Name definition process.

Modifying Existing User Name Properties

To change an existing username property, follow the 5 steps described below.

Choose the Users Shortcut to open the Users View.
Select and double-click an existing user name from the listing to access its User Definition.
Choose the Username tab to view and modify its properties as shown below.

Display Name: sets the user name as seen in the Users View.
Logon As: can be used to specify the actual username used during login. If this property is left blank, the Display Name is use by default.
Description: enter an optional description for the user.
The Key Management button: provides tools to manage the public and private key for the JAMS User Security object that provides access to the remote server.

Note: JAMS supports SSH public/private key pairs directly within the GUI. You can load any existing private key by selecting the Load Key button. JAMS then prompts for a Privacy Enhanced Mail Certificate (.pem) file.

Typically, the SSH public key is loaded on the Server (JAMS Agent) and the private key is loaded on to the Client (JAMS Scheduler).

Set Password button: allows you to enter a user name and password to access the remote server.

On the Security tab make any modifications to the user’s access type by selecting the appropriate checkboxes as described in step 6 on the previous section.

To insert a new access control entry (ACE), highlight the user entry and select the (document icon) button on the right of the dialog. Conversely, to delete an existing ACE, highlight the entry and choose the Delete Access Control Entry button (the orange X).

Once all modifications to the User Definition have been completed, click the Save and Close (the large green checkmark) button at the top left of the dialog.