App Layering

Users and groups

When you first install the App Layering appliance and log onto the management console, there is a built-in administrator account that you can use to get started. This administrator has the rights to perform all App Layering operations. You can edit this user’s properties, including the name, password, and contact info. Be sure to change the password for this built-in administrator account as part of installing and configuring the appliance.

Local users and groups

The OS layer preserves any local users or groups that you add, but app layers, platform layers, user layers, and elastic layers do not. For example, users and groups that you add or change while installing an application on an app layer, platform layer, or user layer don’t persist. Either add the local user or administrator to the OS layer before installing the application, or consider installing the application on the OS layer.

AD users and groups

Other than the built-in administrator account, all users and groups are actually AD users and groups imported via one or more directory junctions. Once your directory junctions are created, you can assign roles to each user. You can see the roles assigned to a user in the User Details. For configuration details, see Connect to a directory service.


Roles determine the App Layering modules a user can manage. When you assign roles to Directory Service users and groups, they can use their Directory Service credentials to log into the management console. For more information on assigning user roles, see Assign roles.

Users and groups