Main differences between the System User and the normal User which is created from useradmin console.?

4 replies
3317 views
Translate

In the Usage perspective what is the main differences between the System User and the normal User which is created from useradmin console.?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Gdubz-57m2muAccepted solution

Level 5

Would say a major difference between rep:User and rep:SystemUser is that one doesn't explicitly have a password set, nor is one really needed... The system user is configured in such a way that it can only be used by sub-services that have been mapped with the org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl OSGi Config Factory. This allows you to use a resource resolver that isn't an individual end user/author, nor is it the full-access admin resolver.

TL;DR; Why do this? What are the advantages? It's safer.

Gdubz-57m2muAccepted solution

Level 5

Would say a major difference between rep:User and rep:SystemUser is that one doesn't explicitly have a password set, nor is one really needed... The system user is configured in such a way that it can only be used by sub-services that have been mapped with the org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl OSGi Config Factory. This allows you to use a resource resolver that isn't an individual end user/author, nor is it the full-access admin resolver.

TL;DR; Why do this? What are the advantages? It's safer.

Translate

smacdonald2008

Level 10

"if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user"

ANswer is no - in 6.1 and forward - it must be a System User.

Translate

K

KkkrishAuthor

Level 4

Ratna Kumar wrote...

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this. ***You need to create system user from https://localhost:4502/crx/explorer. See this thread for the same: http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manager.topic.html/forum__jxlt-creating_anaemsyst.html Hope this helps!

Thanks, Ratna Kumar.

Thanks Ratna,

small confusion is if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user(created from useradmin console) and use those privileges?

What are the additions advantages the system users is going to have as compared to the users created from the user admin console.?

Any system level specific purpose these system users are need to be used(As i can see the systemusers are having a jcr:PrimaryType of rep:SystemUser and the normal user admin console users are of rep:User).?

Regards,

Kk

Translate

Ratna_Kumar

Level 10

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this.

***You need to create system user from https://localhost:4502/crx/explorer.

See this thread for the same: http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manager.topic.html/forum__jxlt-creating_anaemsyst.html

Hope this helps!

Thanks,
Ratna Kumar.

Translate

Sign up

Login with SSO

Login to the community

Login with SSO