Add Password Policies without impacting default users (eiamadmin, ejmcommander, ejmadmin, etc) for WCC users

Products

• Autosys Workload Automation

Issue/Introduction

We need to add password policies without affecting the default users like eiamadmin, ejmcommander, ejmadmin, etc, within the EEM internal user store.

Resolution

Understanding EEM Password Policies
In EEM, password policies for the internal user store are managed separately from other user sources like an external LDAP directory. This separation allows you to enforce specific password rules for your internal users without impacting default administrative accounts, such as EiamAdmin, or users managed in an external directory.

Implementing Password Policies for the Internal User Store
The most effective way to implement and manage these policies is through the EEM user interface (UI). The changes made in the UI can then be exported for backup or migration purposes.

• Login to the EEM UI: Access the EEM UI using an administrative account, typically EiamAdmin.
• Navigate to Password Policies: In the EEM UI, go to Configure -> EEM Server -> Password Policies.
• Define the Policy: On this screen, you can set various password parameters according to your company's policy. These settings apply to the users stored in the EEM internal user store.
  • Password Complexity: Enforce requirements for uppercase and lowercase letters, numbers, and special characters.
  • Password Length: Define the minimum and maximum number of characters.
  • Password Age: Set a maximum age for passwords to require users to change them periodically.
  • Password History: Prevent the reuse of a certain number of previous passwords.
  • Lockout Policy: Configure account lockout after a specified number of failed login attempts.

Scope of Password Policies in EEM
The password policies you configure under Configure -> EEM Server -> Password Policies are designed to enforce security standards for the general user population that you create within the EEM internal user store. They are not applied to the built-in, high-privilege administrative accounts.

Therefore, you can proceed with defining and applying password policies for your internal users within the WCC0004 application context with confidence that it will not affect the EiamAdmin, ejmcommander, or ejmadmin accounts.