Using account aliases for AD

If a user has multiple accounts in Crystal Enterprise, you can link the user's multiple aliases using the assign alias feature (that is, have one user with multiple aliases). This is useful when you are aware of a user who has an AD account mapped to Enterprise and an Enterprise account. By using an alias, the user is able to use either an AD user name and password or an Enterprise user name and password to log on. Thus, an alias enables a user to log on via more than one authentication type.

You can also reassign an alias in Crystal Enterprise. For example, after you map your AD accounts to Crystal Enterprise, you can use the Reassign Alias feature to assign a different alias for a user.

This section describes how to assign an AD alias, reassign an AD alias, and view alias information.

To assign an AD alias

1. Go to the Users management area of the CMC.
2. Select the user you want to assign an alias for.
3. Click the Assign Alias button.
4. Select the appropriate AD alias or aliases.
5. Click the > arrow.

   Tip:    

   • To select multiple users, use the SHIFT+click or CTRL+click combination.
   • To search for a specific user, use the Look For field.
   • If there are many users on your system, click the Previous and Next buttons to navigate through the list of users.
6. Click OK.

   Note:    If the user you choose from the Available aliases list has only one assigned alias, you will receive a message asking you to confirm that you wish to continue. By continuing, the user's account and original favorites folder will be deleted. As a result, the user will not be able to access any reports that used to be in the original favorites folder. If the user has another alias, such as an LDAP alias, the user's account and original favorites folder will not be deleted.

   The Properties tab appears with the new alias listed. By default, NT, LDAP, AD, and Enterprise authentication methods are available.

To reassign an AD alias

1. Go to the Users management area of the CMC.
2. Select the user whose alias you would like to reassign.
3. Click the Reassign Alias button.

   Note:    

   • If there is only one alias for the user, you will receive a message asking you to confirm that you wish to continue.
   • If you choose to assign the alias to a different user, and the original user has only one AD alias and does not have other aliases, the user's account and original favorites folder will be deleted. As a result, the user will not be able to access any reports that used to be in the original favorites folder. If the user has another alias, such as an LDAP alias, the user's account and original favorites folder will not be deleted.
4. Click either Assign the Alias to a new user or select an existing user.

   Note:    When you assign an alias, you are moving an alias to the current user; when you reassign an alias, you are moving the alias away from the current user.

   Tip:    

   • To select multiple users, use the SHIFT+click or CTRL+click combination.
   • To search for a specific user, use the Look For field.
   • If there are many users on your system, click the Previous and Next buttons to navigate through the list of users.
5. Click OK.

To view alias information

1. In the Account Management area, click Users.
2. Select the user whose alias information you would like to view.

   The bottom portion of the properties page contains the alias information. A user can have any combination of Crystal Enterprise aliases, NT aliases, LDAP aliases, or AD aliases. A Crystal Enterprise alias is generated when a new Enterprise account is created. An AD alias is created when users are mapped from AD to Crystal Enterprise (or when the AD Alias Generator tool is run). Users will have both a Crystal Enterprise alias and an AD alias when their AD accounts have been assigned to a Crystal Enterprise user.