Main differences between the System User and the normal User which is created from useradmin console.?

[Kkkrish]

In the Usage perspective what is the main differences between the System User and the normal User which is created from useradmin console.?

[Ratna_Kumar]

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this.

***You need to create system user from https://localhost:4502/crx/explorer. 

See this thread for the same: http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

Hope this helps!

Thanks,
Ratna Kumar.

[Kkkrish]

Ratna Kumar wrote...

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this.

***You need to create system user from https://localhost:4502/crx/explorer. 

See this thread for the same: http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

Hope this helps!

Thanks,
Ratna Kumar.

Thanks Ratna,

small confusion is if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user(created from useradmin console) and use those privileges?

What are the additions advantages the system users is going to have as compared to the users created from the user admin console.?

Any system level specific purpose these system users are need to be used(As i can see the systemusers are having a jcr:PrimaryType of rep:SystemUser and the normal user admin console users are of rep:User).?

Regards,

Kk

[smacdonald2008]

"if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user"

ANswer is no - in 6.1 and forward - it must be a System User. 

[Gdubz-57m2mu · Accepted solution]

Would say a major difference between rep:User and rep:SystemUser is that one doesn't explicitly have a password set, nor is one really needed... The system user is configured in such a way that it can only be used by sub-services that have been mapped with the org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl OSGi Config Factory. This allows you to use a resource resolver that isn't an individual end user/author, nor is it the full-access admin resolver.

TL;DR; Why do this? What are the advantages? It's safer.