Main differences between the System User and the normal User which is created from useradmin console.? | Community
Skip to main content
Level 4
August 9, 2016
Solved

Main differences between the System User and the normal User which is created from useradmin console.?

  • August 9, 2016
  • 4 replies
  • 3311 views

In the Usage perspective what is the main differences between the System User and the normal User which is created from useradmin console.?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Gdubz-57m2mu

Would say a major difference between rep:User and rep:SystemUser is that one doesn't explicitly have a password set, nor is one really needed... The system user is configured in such a way that it can only be used by sub-services that have been mapped with the org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl OSGi Config Factory. This allows you to use a resource resolver that isn't an individual end user/author, nor is it the full-access admin resolver.

TL;DR; Why do this? What are the advantages? It's safer.

4 replies

Ratna_Kumar
Level 10
August 9, 2016

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this.

***You need to create system user from https://localhost:4502/crx/explorer

See this thread for the same: 
http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manager.topic.html/forum__jxlt-creating_anaemsyst.html

Hope this helps!

Thanks,
Ratna Kumar.

KkkrishAuthor
Level 4
August 9, 2016

Ratna Kumar wrote...

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this.

***You need to create system user from https://localhost:4502/crx/explorer

See this thread for the same: 
http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manager.topic.html/forum__jxlt-creating_anaemsyst.html

Hope this helps!

Thanks,
Ratna Kumar.

 

Thanks Ratna,

small confusion is if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user(created from useradmin console) and use those privileges?

What are the additions advantages the system users is going to have as compared to the users created from the user admin console.?

Any system level specific purpose these system users are need to be used(As i can see the systemusers are having a jcr:PrimaryType of rep:SystemUser and the normal user admin console users are of rep:User).?

Regards,

Kk

smacdonald2008
Level 10
August 9, 2016

"if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user"

ANswer is no - in 6.1 and forward - it must be a System User. 

Gdubz-57m2mu
Gdubz-57m2muAccepted solution
Level 5
August 9, 2016

Would say a major difference between rep:User and rep:SystemUser is that one doesn't explicitly have a password set, nor is one really needed... The system user is configured in such a way that it can only be used by sub-services that have been mapped with the org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl OSGi Config Factory. This allows you to use a resource resolver that isn't an individual end user/author, nor is it the full-access admin resolver.

TL;DR; Why do this? What are the advantages? It's safer.