Upgrading to MAS 9.1 from 7.6 or an earlier version of MAS introduces some new user management applications. In 7.6, the Users and Security Groups applications in Maximo were both used. Moving into MAS 8.x and MAS 9.0, some user management was moved to the application suite, while group management and membership remained in Manage. With 9.1, most user management and security group management are done at the application suite level. This might sound like a major change, but the suite now uses the same underlying tables that were used in 7.6 and earlier versions. This means that the Manage database is back to being the single source of truth for user data.

USERMANAGEMENT Security Group

USERMANAGEMENT is the default security group for user management when you upgrade to MAS 9.1. In previous MAS versions, this was a checkbox on the users. By default, MAXADMIN will have access to this group, but individual users will need to be granted this group. Authorized group reassignment has moved to the top right corner. Also note that users in this group need a Base license.

‍

‍

Other default groups in 9.1: https://www.ibm.com/docs/en/masv-and-l/cd?topic=asg-default-groups-in-maximo-application-suite-in-91

User application

Managing users can be done in two places in an upgraded system. I expect that in future releases the Users (Manage) application will be made redundant, but for now, we must keep a foot in both applications. I recommend starting with the MAS version, which is called Users, and then leveraging the Users (Manage) application as a backup. The MAS application has most of the features that you would expect and is much more functional than the older version of the MAS user application. The biggest improvement over older version of MAS is the ability to assign security groups while setting up the user in MAS. I also really like the feature that allows you to calculate a license summary for a user. This brings some transparency to how IBM is determining what AppPoints users are required to consume. This feature is found on the Access & license tab if you want to try it out.

‍

‍

‍

Security Groups Old and New

Like users, managing security groups can is also done in two places in an upgraded system. A major improvement in the MAS version is on the Applications tab where it will show the minimum licenses for this group and the number of modules that the group has edit access to. In the screen shots, I will note that the Security Groups (Manage) application has more tabs and more functionality. If you want to grant something like object structure access, you will need to leverage the Manage application, for now.

‍

‍

‍

Authorized Group Reassignment

When I first tried to add myself to the new USERMANAGEMENT security group, I wasn’t authorized to grant myself the group, but I couldn’t find the authorized group reassignment dialog that I was used to in an older version. Luckily, I found it in the security group application. It also is in the user application if you prefer it there.

‍

1. Left Menu > Suite > Security > Security Groups

2. Open the Security Group

3. Open the More Action menu in the top right > Authorized group reassignment
   ‍

‍

IBM Documentation: https://www.ibm.com/docs/en/masv-and-l/cd?topic=users-authorizing-user-assignment-security-groups

Import/Export of Users

In older versions of MAS, there was a user import feature. The feature was great when doing a fresh load of users, but I found it to be difficult to use when trying to do bulk updates. The main frustration that I had was generating an import file that had all the fields that I didn’t want to change filled in. 9.1 solves this problem by enabling users to be downloaded as a CSV. I think this will allow users to be bulk updated quickly.

‍

‍

IBM Documentation: https://www.ibm.com/docs/en/masv-and-l/cd?topic=users-importing