All Products
Search
Document Center

Elastic Desktop Service:Create a convenience account

Last Updated:Feb 05, 2025

Elastic Desktop Service (EDS) Enterprise has an exclusive account system that supports two types of accounts: convenience accounts and enterprise Active Directory (AD) accounts. Convenience users are end users who log on to Alibaba Cloud Workspace terminals and connect to cloud computers by using convenience accounts. This topic describes how to create a convenience account.

Important

EDS Enterprise has a centralized control plane in Singapore, which is used to manage the user account information that you create and maintain in the EDS Enterprise console. The account information you create is stored and processed in Singapore.

Background information

Convenience accounts are dedicated EDS user accounts that are suitable for scenarios in which you do not need to connect to enterprise AD systems. For more information about the account systems of EDS Enterprise, see Account systems.

Convenience accounts can be activated by end users or administrators.

  • User-activated: Administrators specify usernames and email addresses to create user accounts. End users retrieve logon credentials, such as initial passwords, from the specified email addresses and use the logon credentials to log on to Alibaba Cloud Workspace terminals. The first time end users log on to Alibaba Cloud terminals by using the logon credentials, they must change the initial passwords to secure private information.

  • Administrator-activated: Administrators specify usernames and passwords to create user accounts. The user accounts are automatically activated after they are created. Then, the administrators forward the usernames and passwords to end users. End users can directly use the passwords to log on to Alibaba Cloud Workspace terminals, without the need for password changes. You can specify a user who uses a user-activated account as the user administrator. Then, information about administrator-activated accounts, including logon credentials and password reset notifications, is sent to the email address of the user administrator.

Prerequisites

If you want to add a convenience account to an organization, make sure the organization is created. For more information, see Create an organization.

Create a convenience account

  1. Log on to the EDS Enterprise console.

  2. In the left-side navigation pane, choose Users > Users & Organizations.

  3. On the Users & Organizations page, click the User tab, and then click Create User. Use one of the following methods to create a convenience account:

    Manual creation

    Click the Manual Entry tab, configure the following parameters as needed, and then click Create User.

    Parameter

    Required

    Description

    User Type

    Yes

    The type of the convenience account. Valid values: User-activated and Administrator-activated.

    Username

    Yes

    The username of the convenience account. It must contain 3 to 25 characters in length and must start with a letter or digit. It can contain lowercase letters, digits, hyphens (-), underscores (_), and periods (.). The username must not consist solely of digits or match the built-in username reserved in the operating system. For more information, see Naming conventions of convenience users.

    Display Name

    No

    The display name of the convenience account, which is used for identification purposes and is not visible to end users.

    Contact Info (Email Address)

    Yes

    The email address designated to receive notifications, including cloud computer assignments, login information, initial passwords, and password reset links. Make sure that the email address you specify is valid.

    Parent Organization

    No

    The organization to which the convenience account belongs. You can select an organization in this step or add the convenience account to an organization after you create the account.

    Password

    Yes

    This parameter is required if you set the User Type parameter to Administrator-activated. The password must be at least 10 characters in length and include at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters (excluding spaces).

    Password Validity

    No

    The validity period of the password. By default, the password is permanently valid. You can also enter a validity period that ranges from 30 to 365 days. When the password expires, you must change the password before you can proceed to log on.

    Lock On

    This parameter is required if you set the User Type parameter to Administrator-activated. After the convenience account is locked, end users cannot use the account to log on to Alibaba Cloud Workspace terminals.

    Grant Admin Permission

    No

    Specifies whether to grant local administrator permissions to the convenience account. By default, the Grant Admin Permission parameter is set to Yes. If you do not want to grant the permissions, select No.

    Note
    • Local administrators can install software and modify system settings in cloud computers.

    • Changes to local administrator permissions take effect following a cloud computer restart.

    Remarks

    No

    The supplementary information about the convenience account.

    Batch creation

    Click the Batch Entry tab, configure the following parameters as needed, and then click Close.

    Parameter

    Required

    Description

    User Type

    Yes

    The type of the convenience account. Valid values: User-activated and Administrator-activated.

    Password Validity

    No

    The validity period of the password. By default, the password is permanently valid. You can also enter a validity period that ranges from 30 to 365 days. When the password expires, you must change the password before you can proceed to log on.

    Lock On

    No

    This parameter is required if you set the User Type parameter to Administrator-activated. After the convenience account is locked, end users cannot use the account to log on to Alibaba Cloud Workspace terminals.

    Grant Admin Permission

    No

    Specifies whether to grant local administrator permissions to the convenience account. By default, the Grant Admin Permission parameter is set to Yes. If you do not want to grant the permissions, select No.

    Note
    • Local administrators can install software and modify system settings in cloud computers.

    • Changes to local administrator permissions take effect following a cloud computer restart.

    Upload File

    Yes

    1. Click Download to download a template for importing user information. Open the template, enter user information in the format provided by the template, and then save the template.

      • If you want to create user-activated convenience accounts, specify values in the Username and Email columns of the template.

      • If you want to create administrator-activated convenience accounts, specify values in the Username and Password columns of the template.

      • If you want to specify an organization for each convenience account that you want to import, enter the organization ID in the OrgId column of the template. To obtain the value of OrgId, hover the cursor over the organizational structure as shown in the following figure.

        f_orgid

    2. Click Upload Local File and select the template containing the account information. The system will automatically import the data.

      After the template is imported to the EDS Enterprise console, a message confirming the creation of convenience accounts will appear in the Create User panel. Click View Account to verify the imported data items and verify whether the account information in the template is in a valid format if the import fails.

  4. Click Close.

    After you create the convenience account, you can view the account information on the User tab. The convenience account is in the Normal state.

    Note

    The system does not send notifications when convenience accounts are created. The system sends notifications to specified email addresses when you assign cloud computers or cloud computer pools to the convenience accounts.

Specify a user administrator

For administrator-activated convenience accounts, you must forward usernames and passwords to end users offline. You can specify a user who uses a user-activated convenience account as the user administrator to receive notifications such as logon passwords. This helps end users obtain passwords at the earliest opportunity.

  1. On the User tab of the Users & Organizations page, find the user that you want to specify as the user administrator. The account type of the user must be user-activated.

  2. Click Grant Administrator Permission in the Actions column.

    Note

    If the Grant Administrator Permission option is dimmed, the user is already a user administrator. If you still want to specify the user as the user administrator, you must first revoke the existing administrator permissions from the user.

  3. Click OK.