Elastic Desktop Service (EDS) Enterprise has an exclusive account system that supports two types of accounts: convenience accounts and enterprise Active Directory (AD) accounts. Convenience users are end users who log on to Alibaba Cloud Workspace terminals and connect to cloud computers by using convenience accounts. This topic describes how to create a convenience account.
EDS Enterprise has a centralized control plane in Singapore, which is used to manage the user account information that you create and maintain in the EDS Enterprise console. The account information you create is stored and processed in Singapore.
Background information
Convenience accounts are dedicated EDS user accounts that are suitable for scenarios in which you do not need to connect to enterprise AD systems. For more information about the account systems of EDS Enterprise, see Account systems.
Convenience accounts can be activated by end users or administrators.
User-activated: Administrators specify usernames and email addresses to create user accounts. End users retrieve logon credentials, such as initial passwords, from the specified email addresses and use the logon credentials to log on to Alibaba Cloud Workspace terminals. The first time end users log on to Alibaba Cloud terminals by using the logon credentials, they must change the initial passwords to secure private information.
Administrator-activated: Administrators specify usernames and passwords to create user accounts. The user accounts are automatically activated after they are created. Then, the administrators forward the usernames and passwords to end users. End users can directly use the passwords to log on to Alibaba Cloud Workspace terminals, without the need for password changes. You can specify a user who uses a user-activated account as the user administrator. Then, information about administrator-activated accounts, including logon credentials and password reset notifications, is sent to the email address of the user administrator.
Prerequisites
If you want to add a convenience account to an organization, make sure the organization is created. For more information, see Create an organization.
Create a convenience account
Log on to the EDS Enterprise console.
In the left-side navigation pane, choose .
On the Users & Organizations page, click the User tab, and then click Create User. Use one of the following methods to create a convenience account:
Manual creation
Click the Manual Entry tab, configure the following parameters as needed, and then click Create User.
Parameter
Required
Description
User Type
Yes
The type of the convenience account. Valid values: User-activated and Administrator-activated.
Username
Yes
The username of the convenience account. It must contain 3 to 25 characters in length and must start with a letter or digit. It can contain lowercase letters, digits, hyphens (-), underscores (_), and periods (.). The username must not consist solely of digits or match the built-in username reserved in the operating system. For more information, see Naming conventions of convenience users.
Display Name
No
The display name of the convenience account, which is used for identification purposes and is not visible to end users.
Contact Info (Email Address)
Yes
The email address designated to receive notifications, including cloud computer assignments, login information, initial passwords, and password reset links. Make sure that the email address you specify is valid.
Parent Organization
No
The organization to which the convenience account belongs. You can select an organization in this step or add the convenience account to an organization after you create the account.
Password
Yes
This parameter is required if you set the User Type parameter to Administrator-activated. The password must be at least 10 characters in length and include at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters (excluding spaces).
Password Validity
No
The validity period of the password. By default, the password is permanently valid. You can also enter a validity period that ranges from 30 to 365 days. When the password expires, you must change the password before you can proceed to log on.
Lock On
This parameter is required if you set the User Type parameter to Administrator-activated. After the convenience account is locked, end users cannot use the account to log on to Alibaba Cloud Workspace terminals.
Grant Admin Permission
No
Remarks
No
The supplementary information about the convenience account.
Batch creation
Click the Batch Entry tab, configure the following parameters as needed, and then click Close.
Parameter
Required
Description
User Type
Yes
The type of the convenience account. Valid values: User-activated and Administrator-activated.
Password Validity
No
The validity period of the password. By default, the password is permanently valid. You can also enter a validity period that ranges from 30 to 365 days. When the password expires, you must change the password before you can proceed to log on.
Lock On
No
This parameter is required if you set the User Type parameter to Administrator-activated. After the convenience account is locked, end users cannot use the account to log on to Alibaba Cloud Workspace terminals.
Grant Admin Permission
No
Specifies whether to grant local administrator permissions to the convenience account. By default, the Grant Admin Permission parameter is set to Yes. If you do not want to grant the permissions, select No.
NoteLocal administrators can install software and modify system settings in cloud computers.
Changes to local administrator permissions take effect following a cloud computer restart.
Upload File
Yes
Click Download to download a template for importing user information. Open the template, enter user information in the format provided by the template, and then save the template.
If you want to create user-activated convenience accounts, specify values in the
UsernameandEmailcolumns of the template.If you want to create administrator-activated convenience accounts, specify values in the
UsernameandPasswordcolumns of the template.If you want to specify an organization for each convenience account that you want to import, enter the organization ID in the
OrgIdcolumn of the template. To obtain the value ofOrgId, hover the cursor over the organizational structure as shown in the following figure.
Click Upload Local File and select the template containing the account information. The system will automatically import the data.
After the template is imported to the EDS Enterprise console, a message confirming the creation of convenience accounts will appear in the Create User panel. Click View Account to verify the imported data items and verify whether the account information in the template is in a valid format if the import fails.
Click Close.
After you create the convenience account, you can view the account information on the User tab. The convenience account is in the Normal state.
NoteThe system does not send notifications when convenience accounts are created. The system sends notifications to specified email addresses when you assign cloud computers or cloud computer pools to the convenience accounts.
Specify a user administrator
For administrator-activated convenience accounts, you must forward usernames and passwords to end users offline. You can specify a user who uses a user-activated convenience account as the user administrator to receive notifications such as logon passwords. This helps end users obtain passwords at the earliest opportunity.
On the User tab of the Users & Organizations page, find the user that you want to specify as the user administrator. The account type of the user must be user-activated.
Click Grant Administrator Permission in the Actions column.
NoteIf the Grant Administrator Permission option is dimmed, the user is already a user administrator. If you still want to specify the user as the user administrator, you must first revoke the existing administrator permissions from the user.
Click OK.