Account

Updated 2024.09.25

Edge Conductor is a web-based service and requires user login. To create a user account, you need to request the administrator to register it through the system. The account authentication methods are supported in two ways, and which method to use is configured during the Edge Conductor installation process.

LDAP Server Authentication

LGE users are registered to the Edge Conductor with their lgep account name, and the Edge Conductor only stores the user ID without storing the password separately. Users must use the user ID and password registered in lgep when logging in, and authentication requests are made to the LDAP server. This generally applies when the Edge Conductor is deployed in the LGE internal cloud and provided as a SaaS.

Edge Conductor Self-Authentication

The Edge Conductor system itself registers and manages account information, including passwords. It manages account names and passwords (stored in encrypted form) in the Edge Conductor database. This is generally used when the service is provided as an on-premise installation with a host type service.

The registration and modification methods vary depending on the authentication method. Refer to the 'Create Account' section for detailed information.

---

Role Policies

Edge Conductor accounts are categorized as follows, with each user assigned one of these roles:

• admin: The Super Admin of the installed Edge Conductor system, responsible for system operation, maintenance, and troubleshooting.
• manager: The administrator of Edge Conductor, responsible for managing all tasks performed within Edge Conductor.
• user: A general user of Edge Conductor.

Category	Function UI	Description	admin	manager	user
Account	Invite Member	Register new account (LDAP)	O	X	X
	Edge Account	Change user role	O	X	X
	Delete Account	Delete account	O	X	X
Edges	New Edge	Register edge	O	O	O
	Edit Edge	Edit edge	O	O	Limited to edges registered by user
	Delete Edge	Unregister edge	O	O	Limited to edges registered by user
Dataset	New Dataset	Create data	O	O	O
	Make New Dataset	Create dataset from selected edge's inference result	O	O	O
	Select Edge	Select edge for creating dataset from inference result	O	O	O (all edges)
	Delete Dataset	Delete dataset	O	O	Limited to datasets created by user
	Label Data	Relabel data	O	O	Limited to datasets created by user
Stream	New Stream	Create stream	O	O	O
	Deployment History	View stream deployment history on edge	O	O	O
	Duplicate	Duplicate stream	O	O	O
	Delete	Delete stream	O	O	Limited to streams created by user
	Train	Request model training	O	O	Limited to streams created by user
	Deploy	Deploy stream & model	O	O	Limited to edges registered by user
	Select Edge (Deploy)	Select edge for deployment	O	O	Limited to edges registered by user

---

User Login

During the login process, users may encounter the following error messages:

• "License has expired. Please update your license.": Check the license of the Edge Conductor system. Contact the system administrator.
• "Login Failed. Your account may be locked after 5 failed attempts." : Account does not exist or password is incorrect.
• "There have been more than 5 failed login attempts for this account. Please contact the admin.": Account is locked due to more than 5 incorrect password attempts. Contact the administrator.
• "This account has been inactive for a long time. Please contact the admin.": Account is locked due to inactivity for a long time. Contact the administrator.

---

Login Session Maintenance Policy

Automatic logout will occur under the following conditions:

• If inactive for 90 minutes, automatic logout protects unattended sessions.
• If logged in from another environment, the session in the previous environment is automatically logged out.

---

Account Registration

Accounts → Invite Member/New Account

Register an account to use the Edge Conductor service. The registration process varies depending on the authentication method set during the Edge Conductor installation. Enter the role (admin, manager, or user). Since authentication is performed through LDAP, no password entry is required during registration.

LDAP Server Authentication

To query users through the LDAP server, server authentication is required. If necessary, the system may request the user account and password for an admin user. After that, you enter the LGEP ID to be registered and request a query for the user to be registered through the LDAP check, receiving the information from the LDAP server.

Edge Conductor System Self-Authentication

Enter the ID and check for duplicates. Enter the password to be used for system authentication. The system database stores the password in encrypted form to reduce the risk of leakage. Enter the user's name and role (admin, manager, or user). Optionally, enter the email, company, and department information.

---

Account Deletion

Delete unused accounts.

---

Unlock Account

If there is no login for a long period of 90 days (30 days for admin users) or if the password is entered incorrectly more than 5 times, the account will be locked. Users with locked accounts will not be able to log in. Administrators can access the Account menu to check the last login time of all users and whether their accounts are locked.

To unlock a specific account, perform the following steps:

1. Go to the Account menu.
2. Select the user to unlock.
3. Click Actions - Edit.
4. Save without making any changes.