Register users in ELN Interface
Users can only be registered by someone with Instance admin role:
- Go to the User Manager, under Utilities.
- Click the +New User button.
3. Select the Authentication Service:
a. Default Authentication Service. This can be LDAP or SSO.
b. File Authentication Service. In this case a username and password need to be created.
4. User ID. for LDAP authentication, this is the LDAP username; for SSO authentication this is the email address of the user.

For file-based authentication provide username and password. The password can later be changed by the user.
Default roles assigned in ELN
When a user is registered via the ELN interface, a Space (folder) with the name of the user is automatically created under the Lab Notebook main menu. The user is also assigned some default roles:
- Space admin of the Space created for him/her under the notebook.
- Space user of the Inventory Spaces (MATERIALS, METHODS by default), the STOCK_CATALOG and the STORAGE Spaces.
- Space Observer of the STOCK_ORDERS, ELN_SETTINGS and PUBLICATIONS Spaces.
Modification to default rights can be granted by an Instance admin from the admin UI, as explained below.
Overview of roles: https://openbis.ch/index.php/docs/admin-documentation/user-registration/openbis-roles/ .
Register users from the admin UI
When users are registered via the admin UI no default roles are assigned.
To register new users from the admin UI:
- go to the Users tab. The Users and Groups will show in the main menu on left had side.
- Click on Users in the menu: the Add button at the bottom of the menu will become active (blue)
- Click the Add button
- Enter the User Id. This is the LDAP username, when LDAP authentication is used, or the email address if SSO is used. Please note that file-based authentication (where username and password can be created) is not supported by the admin UI.
- Home space: this sets the default folder a user sees marked as My Space in the Lab Notebook.
- Click the Add Role button at the bottom of the page to assign a role to the user.
- Click the Add Group button at the bottom of the page to assign a user to a group of users.
8. To assign a role to a user, first the Level needs to be selected (Instance, Space, Project) .
9.If level is Instance, you can directly select a role (Admin, Observer). If the level is Space or Project, you first need to select the Space or Project and then assign a Role.
10. Multiple roles can be assigned to a user.
11. Roles can be removed from the Remove button at the bottom of the page.
12. After making the necessary changes, press the Save button.
Note: for using the ELN interface, it is necessary to assign every user or user group the OBSERVER role to the space ELN_SETTINGS.
Create users groups in admin UI
It is possible to create groups of users and assign rights to a group:
- go to the Users tab. The Users and Groups will show in the main menu on left had side.
- Click on Groups in the menu: the Add button at the bottom of the menu will become active (blue)
- Click the Add button
- Enter a Code for the group. This is the equivalent of a name, but Codes can only contain numbers, letters and the following symbols: . – _
- You can now assign registered users to the group and assign Roles as explained above.