Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
Bedrock Mission!

Learn more

View all

Sign in to view all badges

SOLVED

Main differences between the System User and the normal User which is created from useradmin console.?

Kkkrish
Level 5
Level 5

In the Usage perspective what is the main differences between the System User and the normal User which is created from useradmin console.?

1 Accepted Solution
Gdubz-57m2mu
Correct answer by
Level 5
Level 5

Would say a major difference between rep:User and rep:SystemUser is that one doesn't explicitly have a password set, nor is one really needed... The system user is configured in such a way that it can only be used by sub-services that have been mapped with the org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl OSGi Config Factory. This allows you to use a resource resolver that isn't an individual end user/author, nor is it the full-access admin resolver.

TL;DR; Why do this? What are the advantages? It's safer.

View solution in original post

4 Replies
Ratna_Kumar
Community Advisor
Community Advisor

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this.

***You need to create system user from https://localhost:4502/crx/explorer

See this thread for the same: 
http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

Hope this helps!

Thanks,
Ratna Kumar.

Kkkrish
Level 5
Level 5

Ratna Kumar wrote...

Hi,

Use of admin session and admin resource resolver through ResourceresolverFactory is now deprecated, that’s why from AEM 6.1 Adobe forces developers to create system users and map them to Service User Mapper in Felix Console. This is the only reason to create system user., where as normal users cannot do this.

***You need to create system user from https://localhost:4502/crx/explorer

See this thread for the same: 
http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

Hope this helps!

Thanks,
Ratna Kumar.

 

Thanks Ratna,

small confusion is if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user(created from useradmin console) and use those privileges?

What are the additions advantages the system users is going to have as compared to the users created from the user admin console.?

Any system level specific purpose these system users are need to be used(As i can see the systemusers are having a jcr:PrimaryType of rep:SystemUser and the normal user admin console users are of rep:User).?

Regards,

Kk

smacdonald2008
Level 10
Level 10

"if i create a normal user from the useradmin console and provide the permissions to that user (may be via a group level) can't i use the "Apache Sling Service User Mapper" to bind to that user"

ANswer is no - in 6.1 and forward - it must be a System User. 

Gdubz-57m2mu
Correct answer by
Level 5
Level 5

Would say a major difference between rep:User and rep:SystemUser is that one doesn't explicitly have a password set, nor is one really needed... The system user is configured in such a way that it can only be used by sub-services that have been mapped with the org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl OSGi Config Factory. This allows you to use a resource resolver that isn't an individual end user/author, nor is it the full-access admin resolver.

TL;DR; Why do this? What are the advantages? It's safer.