Skip to main content

Window: User

[Created: 07/06/1999 - Updated: 03/06/2021 ]
Description: Maintain Users of the system
Help: The User Window allows you to maintain User of the system. Users can log into the system and have access to functionality via one or more roles. A user can also be a business partner contact.

Tab: User Contact

[Created: 07/06/1999 - Updated: 21/04/2015 ]
Description: Maintain User or Business Partner Contact
Help: The User Tab defines the log in for Users who have access to the system. For application access, users need to have a role assigned.
Tab Level: 0

Table 10: User Contact - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.ad_user.AD_Client_ID numeric(10)
Table Direct
ImageImage or IconImages and Icon can be used to display supported graphic formats (gif, jpg, png).You can either load the image (in the database) or point to a graphic via a URI (i.e. it can point to a resource, http address)ad_user.AD_Image_ID numeric(10)
Image
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.ad_user.AD_Org_ID numeric(10)
Table Direct
NameAlphanumeric identifier of the entityThe name of an entity (record) is used as an default search option in addition to the search key. The name is up to 60 characters in length.ad_user.Name character varying(60)
String
DescriptionOptional short description of the recordA description is limited to 255 characters.ad_user.Description character varying(255)
String
CommentsComments or additional informationThe Comments field allows for free form entry of additional information.ad_user.Comments character varying(2000)
Text
Search KeySearch key for the record in the format required7 bit lower case alpha numeric - max length 8 - can be used for operating system names.ad_user.Value character varying(40)
String
ActiveThe record is active in the systemThere are two methods of making records unavailable in the system: One is to delete the record, the other is to de-activate the record. A de-activated record is not available for selection, but available for reports.There are two reasons for de-activating and not deleting records:(1) The system requires the record for audit purposes.(2) The record is referenced by other records. E.g., you cannot delete a Business Partner, if there are invoices for this partner record existing. You de-activate the Business Partner and prevent that this record is used for future entries.ad_user.IsActive character(1)
Yes-No
Business PartnerIdentifies a Business PartnerA Business Partner is anyone with whom you transact. This can include Vendor, Customer, Employee or Salespersonad_user.C_BPartner_ID numeric(10)
Search
Partner LocationIdentifies the (ship to) address for this Business PartnerThe Partner address indicates the location of a Business Partnerad_user.C_BPartner_Location_ID numeric(10)
Table Direct
Ship ContactBusiness Partner Shipment ContactIf the Ship Contact is selected, the contact is used for notification.ad_user.IsShipTo character(1)
Yes-No
Invoice ContactBusiness Partner Invoice/Bill ContactIf the Invoice Contact is selected, the contact is used to send notifications about invoices to a customer or a vendor.ad_user.IsBillTo character(1)
Yes-No
EMail AddressElectronic Mail AddressThe Email Address is the Electronic Mail ID for this User and should be fully qualified (e.g. joe.smith@company.com). The Email Address is used to access the self service application functionality from the web.ad_user.EMail character varying(60)
String
PasswordPassword of any length (case sensitive)The Password for this User. Passwords are required to identify authorized users. For iDempiere Users, you can change the password via the Process "Reset Password".ad_user.Password character varying(1024)
String
TitleName this entity is referred to asThe Title indicates the name that an entity is referred to as.ad_user.Title character varying(40)
String
BirthdayBirthday or Anniversary dayBirthday or Anniversary dayad_user.Birthday timestamp without time zone
Date
Full BP AccessThe user/contact has full access to Business Partner information and resourcesIf selected, the user has full access to the Business Partner (BP) information (Business Documents like Orders, Invoices - Requests) or resources (Assets, Downloads). If you deselect it, the user has no access rights unless, you explicitly grant it in tab "BP Access"ad_user.IsFullBPAccess character(1)
Yes-No
PhoneIdentifies a telephone numberThe Phone field identifies a telephone numberad_user.Phone character varying(40)
String
2nd PhoneIdentifies an alternate telephone number.The 2nd Phone field identifies an alternate telephone number.ad_user.Phone2 character varying(40)
String
FaxFacsimile numberThe Fax identifies a facsimile number for this Business Partner or Locationad_user.Fax character varying(40)
String
Notification TypeType of NotificationsEmails or Notification sent out for Request Updates, etc.ad_user.NotificationType character(1)
List
PositionJob Positionad_user.C_Job_ID numeric(10)
Table Direct
User PINad_user.UserPIN character varying(20)
String
EMail User IDUser Name (ID) in the Mail SystemThe user name in the mail system is usually the string before the @ of your email address. Required if the mail server requires authentication to send emails.ad_user.EMailUser character varying(60)
String
EMail User PasswordPassword of your email user idRequired if the mail server requires authentication to send emails.ad_user.EMailUserPW character varying(255)
String
SupervisorSupervisor for this user/organization - used for escalation and approvalThe Supervisor indicates who will be used for forwarding and escalating issues for this user - or for approvals.ad_user.Supervisor_ID numeric(10)
Search
LDAP User NameUser Name used for authorization via LDAP (directory) servicesOptional LDAP system user name for the user. If not defined, the normal Name of the user is used. This allows to use the internal (LDAP) user id (e.g. jjanke) and the normal display name (e.g. Jorg Janke). The LDAP User Name can also be used without LDAP enables (see system window). This would allow to sign in as jjanke and use the display name of Jorg Janke.ad_user.LDAPUser character varying(60)
String
Support Userad_user.IsSupportUser character(1)
Yes-No
Trx OrganizationPerforming or initiating organizationThe organization which performs or initiates this transaction (for another organization). The owning Organization may not be the transaction organization in a service bureau environment, with centralized services, and inter-organization transactions.ad_user.AD_OrgTrx_ID numeric(10)
Table
Auto expand menuIf ticked, the menu is automatically expandedad_user.IsMenuAutoExpand character(1)
List
GreetingGreeting to print on correspondenceThe Greeting identifies the greeting to print on correspondence.ad_user.C_Greeting_ID numeric(10)
Table Direct
EMail VerifyDate Email was verifiedad_user.EMailVerifyDate timestamp without time zone
Date+Time
Default mail templatead_user.R_DefaultMailText_ID numeric(10)
Table
Add Mail Text AutomaticallyThe selected mail template will be automatically inserted when creating an emailad_user.IsAddMailTextAutomatically character(1)
Yes-No
Last ContactDate this individual was last contactedThe Last Contact indicates the date that this Business Partner Contact was last contacted.ad_user.LastContact timestamp without time zone
Date
Verification InfoVerification information of EMail AddressThe field contains additional information how the EMail Address has been verifiedad_user.EMailVerify character varying(40)
String
Last ResultResult of last contactThe Last Result identifies the result of the last contact made.ad_user.LastResult character varying(255)
String
Date Account Lockedad_user.DateAccountLocked timestamp without time zone
Date+Time
Lockedad_user.IsLocked character(1)
Yes-No
No Password Resetad_user.IsNoPasswordReset character(1)
Yes-No
Expiredad_user.IsExpired character(1)
Yes-No
No Expiread_user.IsNoExpire character(1)
Yes-No
Failed Login Countad_user.FailedLoginCount numeric(10)
Integer
Date Last Loginad_user.DateLastLogin timestamp without time zone
Date+Time
Date Password Changedad_user.DatePasswordChanged timestamp without time zone
Date+Time
Authentication Typead_user.AuthenticationType character varying(10)
List

Tab: User Roles

[Created: 11/06/1999 - Updated: 02/01/2000 ]
Description: User Roles
Help: The User Roles Tab define the Roles each user may have. The Roles will determine what windows, tasks, processes and workflows that a User has access to.
Tab Level: 1

Table 20: User Roles - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.ad_user_roles.AD_Client_ID numeric(10)
Table Direct
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.ad_user_roles.AD_Org_ID numeric(10)
Table Direct
User/ContactUser within the system - Internal or Business Partner ContactThe User identifies a unique user in the system. This could be an internal user or a business partner contactad_user_roles.AD_User_ID numeric(10)
Search
RoleResponsibility RoleThe Role determines security and access a user who has this Role will have in the System.ad_user_roles.AD_Role_ID numeric(10)
Search
ActiveThe record is active in the systemThere are two methods of making records unavailable in the system: One is to delete the record, the other is to de-activate the record. A de-activated record is not available for selection, but available for reports.There are two reasons for de-activating and not deleting records:(1) The system requires the record for audit purposes.(2) The record is referenced by other records. E.g., you cannot delete a Business Partner, if there are invoices for this partner record existing. You de-activate the Business Partner and prevent that this record is used for future entries.ad_user_roles.IsActive character(1)
Yes-No

Tab: User Substitute

[Created: 01/01/2004 - Updated: 10/01/2015 ]
Description: Substitute of the user
Help: A user who can act for this user.
Tab Level: 1

Table 30: User Substitute - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.ad_user_substitute.AD_Client_ID numeric(10)
Table Direct
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.ad_user_substitute.AD_Org_ID numeric(10)
Table Direct
User/ContactUser within the system - Internal or Business Partner ContactThe User identifies a unique user in the system. This could be an internal user or a business partner contactad_user_substitute.AD_User_ID numeric(10)
Search
NameAlphanumeric identifier of the entityThe name of an entity (record) is used as an default search option in addition to the search key. The name is up to 60 characters in length.ad_user_substitute.Name character varying(60)
String
DescriptionOptional short description of the recordA description is limited to 255 characters.ad_user_substitute.Description character varying(255)
String
ActiveThe record is active in the systemThere are two methods of making records unavailable in the system: One is to delete the record, the other is to de-activate the record. A de-activated record is not available for selection, but available for reports.There are two reasons for de-activating and not deleting records:(1) The system requires the record for audit purposes.(2) The record is referenced by other records. E.g., you cannot delete a Business Partner, if there are invoices for this partner record existing. You de-activate the Business Partner and prevent that this record is used for future entries.ad_user_substitute.IsActive character(1)
Yes-No
SubstituteEntity which can be used in place of this entityThe Substitute identifies the entity to be used as a substitute for this entity.ad_user_substitute.Substitute_ID numeric(10)
Search
Valid fromValid from including this date (first day)The Valid From date indicates the first day of a date rangead_user_substitute.ValidFrom timestamp without time zone
Date
Valid toValid to including this date (last day)The Valid To date indicates the last day of a date rangead_user_substitute.ValidTo timestamp without time zone
Date

Tab: Org Access

[Created: 21/04/2005 - Updated: 10/03/2022 ]
Description: Maintain User Org Access
Help: Add the tenant and organizations the user has access to. Entries here are ignored, if in the Role, User Org Access is not selected or the role has access to all roles.Note that access information is cached and requires re-login or reset of cache.
Tab Level: 1

Table 50: Org Access - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.ad_user_orgaccess.AD_Client_ID numeric(10)
Table Direct
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.ad_user_orgaccess.AD_Org_ID numeric(10)
Table Direct
User/ContactUser within the system - Internal or Business Partner ContactThe User identifies a unique user in the system. This could be an internal user or a business partner contactad_user_orgaccess.AD_User_ID numeric(10)
Table Direct
ActiveThe record is active in the systemThere are two methods of making records unavailable in the system: One is to delete the record, the other is to de-activate the record. A de-activated record is not available for selection, but available for reports.There are two reasons for de-activating and not deleting records:(1) The system requires the record for audit purposes.(2) The record is referenced by other records. E.g., you cannot delete a Business Partner, if there are invoices for this partner record existing. You de-activate the Business Partner and prevent that this record is used for future entries.ad_user_orgaccess.IsActive character(1)
Yes-No
Read OnlyField is read onlyThe Read Only indicates that this field may only be Read. It may not be updated.ad_user_orgaccess.IsReadOnly character(1)
Yes-No

Tab: User Mail

[Created: 02/05/2005 - Updated: 02/05/2005 ]
Description: Mail sent to the user
Help: Archive of mails sent to users
Tab Level: 1

Table 60: User Mail - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.ad_usermail.AD_Client_ID numeric(10)
Table Direct
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.ad_usermail.AD_Org_ID numeric(10)
Table Direct
User/ContactUser within the system - Internal or Business Partner ContactThe User identifies a unique user in the system. This could be an internal user or a business partner contactad_usermail.AD_User_ID numeric(10)
Search
Mail TemplateText templates for mailingsThe Mail Template indicates the mail template for return messages. Mail text can include variables. The priority of parsing is User/Contact, Business Partner and then the underlying business object (like Request, Dunning, Workflow object).So, @Name@ would resolve into the User name (if user is defined defined), then Business Partner name (if business partner is defined) and then the Name of the business object if it has a Name.For Multi-Lingual systems, the template is translated based on the Business Partner's language selection.ad_usermail.R_MailText_ID numeric(10)
Table Direct
Mail MessageWeb Store Mail Message Templatead_usermail.W_MailMsg_ID numeric(10)
Table Direct
CreatedDate this record was createdThe Created field indicates the date that this record was created.ad_usermail.Created timestamp without time zone
Date+Time
Message IDEMail Message IDSMTP Message ID for tracking purposesad_usermail.MessageID character varying(120)
String
EMail sent fromad_usermail.EMailFrom character varying(255)
String
Toad_usermail.RecipientTo character varying(2000)
String
Ccad_usermail.RecipientCc character varying(2000)
String
Bccad_usermail.RecipientBcc character varying(2000)
String
SubjectEmail Message SubjectSubject of the EMailad_usermail.Subject character varying(255)
String
Mail TextText used for Mail messageThe Mail Text indicates the text used for mail messages.ad_usermail.MailText character varying(2000)
Text
Delivery ConfirmationEMail Delivery confirmationad_usermail.DeliveryConfirmation character varying(120)
String
Deliveredad_usermail.IsDelivered character(1)
List

Tab: Queries

[Created: 09/09/2005 - Updated: 09/09/2005 ]
Description: View and maintain saved queries
Help:
Tab Level: 1

Table 70: Queries - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.ad_userquery.AD_Client_ID numeric(10)
Table Direct
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.ad_userquery.AD_Org_ID numeric(10)
Table Direct
User/ContactUser within the system - Internal or Business Partner ContactThe User identifies a unique user in the system. This could be an internal user or a business partner contactad_userquery.AD_User_ID numeric(10)
Search
NameAlphanumeric identifier of the entityThe name of an entity (record) is used as an default search option in addition to the search key. The name is up to 60 characters in length.ad_userquery.Name character varying(60)
String
DescriptionOptional short description of the recordA description is limited to 255 characters.ad_userquery.Description character varying(255)
String
ActiveThe record is active in the systemThere are two methods of making records unavailable in the system: One is to delete the record, the other is to de-activate the record. A de-activated record is not available for selection, but available for reports.There are two reasons for de-activating and not deleting records:(1) The system requires the record for audit purposes.(2) The record is referenced by other records. E.g., you cannot delete a Business Partner, if there are invoices for this partner record existing. You de-activate the Business Partner and prevent that this record is used for future entries.ad_userquery.IsActive character(1)
Yes-No
DefaultDefault valueThe Default Checkbox indicates if this record will be used as a default value.ad_userquery.IsDefault character(1)
Yes-No
TableDatabase Table informationThe Database Table provides the information of the table definitionad_userquery.AD_Table_ID numeric(10)
Table Direct
Validation codeValidation CodeThe Validation Code displays the date, time and message of the error.You can add advanced SQL queries to your searches by filling this field with @SQL=[WHERE CLAUSE].Do not include the WHERE statement and use Fully qualified SQL statements. F.e:@SQL=C_Order.isActive='Y' AND SalesRep_ID=@AD_User_ID@ will filter orders by active and where the sales representative is the current user.ad_userquery.Code character varying(4000)
String

Tab: LDAP Access

[Created: 29/10/2006 - Updated: 29/10/2006 ]
Description: User Access via LDAP
Help:
Tab Level: 1

Table 80: LDAP Access - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.ad_ldapaccess.AD_Client_ID numeric(10)
Table Direct
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.ad_ldapaccess.AD_Org_ID numeric(10)
Table Direct
User/ContactUser within the system - Internal or Business Partner ContactThe User identifies a unique user in the system. This could be an internal user or a business partner contactad_ldapaccess.AD_User_ID numeric(10)
Table Direct
Ldap ProcessorLDAP Server to authenticate and authorize external systems based on iDempiereThe LDAP Server allows third party software (e.g. Apache) to use the users defined in the system to authentificate and authorize them. There is only one server per iDempiere system. The "o" is the Tenant key and the optional "ou" is the Interest Area key.ad_ldapaccess.AD_LdapProcessor_ID numeric(10)
Table Direct
Interest AreaInterest Area or TopicInterest Areas reflect interest in a topic by a contact. Interest areas can be used for marketing campaigns.ad_ldapaccess.R_InterestArea_ID numeric(10)
Table Direct
CreatedDate this record was createdThe Created field indicates the date that this record was created.ad_ldapaccess.Created timestamp without time zone
Date+Time
ErrorAn Error occurred in the executionad_ldapaccess.IsError character(1)
Yes-No
SummaryTextual summary of this requestThe Summary allows free form text entry of a recap of this request.ad_ldapaccess.Summary character varying(2000)
Text
DescriptionOptional short description of the recordA description is limited to 255 characters.ad_ldapaccess.Description character varying(255)
String

Tab: Document Status Access

[Created: 28/06/2021 - Updated: 28/06/2021 ]
Description:
Help:
Tab Level: 1

Table 100: Document Status Access - Fields

Table: Report Parameters

NameDescriptionHelpTechnical Info
TenantTenant for this installation.A Tenant is a company or a legal entity. You cannot share data between Tenants.pa_documentstatusaccess.AD_Client_ID numeric(10)
Table Direct
OrganizationOrganizational entity within tenantAn organization is a unit of your tenant or legal entity - examples are store, department. You can share data between organizations.pa_documentstatusaccess.AD_Org_ID numeric(10)
Search
User/ContactUser within the system - Internal or Business Partner ContactThe User identifies a unique user in the system. This could be an internal user or a business partner contactpa_documentstatusaccess.AD_User_ID numeric(10)
Search
RoleResponsibility RoleThe Role determines security and access a user who has this Role will have in the System.pa_documentstatusaccess.AD_Role_ID numeric(10)
Table Direct
Document Statuspa_documentstatusaccess.PA_DocumentStatus_ID numeric(10)
Table Direct
ActiveThe record is active in the systemThere are two methods of making records unavailable in the system: One is to delete the record, the other is to de-activate the record. A de-activated record is not available for selection, but available for reports.There are two reasons for de-activating and not deleting records:(1) The system requires the record for audit purposes.(2) The record is referenced by other records. E.g., you cannot delete a Business Partner, if there are invoices for this partner record existing. You de-activate the Business Partner and prevent that this record is used for future entries.pa_documentstatusaccess.IsActive character(1)
Yes-No