Usage

4. Usage#

This section describes how school administrators, teachers, and legal guardians use the School Accounts app to find users and reset their passwords. What each of them can see and do depends on their roles, as described in Roles and permissions.

4.1. List the users of a class or work group#

To list the users of a school class or a work group, follow these steps:

  1. Open the School Accounts tile in the Univention Portal. If Keycloak asks for your credentials, sign in.

  2. In the School list, select the school. The list contains only the schools that you can filter by.

  3. In the Classes & Work Groups list, select the class or work group. To find it in a long list, enter part of its name. To list every user of the school, select All classes and work groups.

  4. Optional: To list only the users with one role, select the role in the Roles row above the table, for example Student. Selecting another role replaces it. To list every role again, select the role once more or select All. A user counts only with the roles they hold at the selected school.

The list view shows the users of your selection with the columns Last name, First name, Username, Roles, and Activated. It shows only the users whose data you may read.

The browser address contains the selected school, group, and role. You can bookmark it or share it, and it opens the same list for every user who has the same permissions.

4.2. Reset passwords#

You can set one new password for one or more users at once. To reset passwords, follow these steps:

  1. List the users as described in List the users of a class or work group.

  2. Select the users whose passwords you want to reset. The list view shows a checkbox only for the users whose password you can reset. To select every such user on the page, select the checkbox in the table header.

  3. Click Reset password. A dialog lists the accounts that the reset affects. It warns you when the selection contains users with different roles, or when it affects many accounts at once.

  4. In the New password box, enter the new password.

  5. Optional: To make the users choose their own password when they sign in next, select User has to change the password at the next login. The dialog offers this option only when the Kelvin REST API exposes the Univention Directory Manager (UDM) property pwdChangeNextLogin of users.

  6. Select the checkbox that states how many passwords the reset affects, and click Set password.

The app then shows how many passwords it has reset and lists every account whose password it couldn’t reset, with the reason. A single reset covers at most 200 users.

4.3. Sign out#

To end your session, click logout in the page header. The app also ends your session in Keycloak, so the next visit asks for your credentials again.

On this page