2. User Accounts

After installing AmSYS to your server, configuring the properties file, and running the setup commands, the next step is signing in to the system!

Creating Admin User Account

The first account you create should be your own System Admin account. This allows you to modify configurations and control access for other users.

1. Navigate to http://your.com/ (wherever the virtual host for AmSYS is configured for) and sign in using EveSSO. The first time any user signs in, an account is automatically created for them in the Users table with a default ROLE.
2. To change your own ROLE, log in to PHPMyAdmin and load the Users table. Change override_role from ROLE_MEMBER to ROLE_SYSTEM_ADMIN and save.
3. Logout of AmSYS and log back in, you now have system admin permissions!

Controlling Access

Now that you are a System Admin and are able to manage the application settings, you should configure who can access your system and how.

1. Log in with a System Admin account and navigate to System > Access Control > Authorization on the left
2. Once on the Authorization page, you will see the only entry is 'Default Access'. This means that anyone can log in to your system and will be granted the role associated with that access level. Go ahead and change this to 'ROLE_DENIED' to make it so only you can log in (note: if others attempt to log in, an account will be created for them but they won't be able to sign in. You can then manually update them on the 'Users' page to grant access if you wanted to manage users manually.)
3. Now that everyone is blocked, let's grant specific access, starting with your alliance. Type your alliance name in the box and hit 'search'. Choose the correct alliance from the list (double click) and they should be added to the manual authorization list. You can set their role to 'ROLE_MEMBER'.
4. You can also add a character API key/code to pull a list of personal, corporate, and alliance contacts and base roles off of contact levels. When doing this, note that your own Corp/Alliance are likely not on the contact list and will not be granted roles through this. If you configure an API, you can have it periodically update itself by following the guide to set up a cron job.