Application management : Accounts : Field descriptions : User fields
User fields
Fields
Users selection step
User
User name
Specify a user name.
For accounts created via Keycloak, this field is read-only and only becomes editable if SSO is turned off.
Description
Enter a relevant description of the user.
Start date
Specify the date when the user is allowed to log on. If end users try to log on to the system on an earlier date, they will receive a message stating that their account is not yet active.
End date
Specify the date when the user is no longer allowed to log on.
* 
• From the end date onward, users can no longer log in.
• To prevent accidental lockouts, users cannot set an end date for their own accounts.
Previous log on date-time
Displays the last log on date-time (in UTC time).
Previous log on date-time (user)
Displays the last log on date-time in the time zone of the user account (the logged in user).
Anonymized?
Indicates whether this account was subject to anonymization.
Password
Password
This field is only displayed if you add a new user. Specify a password for this user. You can change the password using the Change password option on the action panel.
For accounts created via Keycloak, this field is read-only and only becomes editable if SSO is turned off.
Password expiry date
Specify a password expiry date. On this date, the user password will expire.
Password never expires
If you select Yes, the Password expiry date field is grayed out and the user password will never expire.
* 
If the Password never expires field is set to No, then the expiry date is set to the current date plus the number of days as defined in the password settings.
* 
For more information on Password settings (System settings).
No. of attempts forgotten password
This field will be automatically populated with a number whenever the user clicks Forgot password? on the login screen. The maximum number of attempts is 3, after which the user account will be locked and you have to reset this field. For more information on resetting forgotten password, see Clearing forgotten password attempts.
Keycloak subject identifier
Read-only field displaying the UUID assigned by Keycloak to the user.
This field is automatically filled in by Keycloak if a new user is created via Just-in-Time (JIT) user provisioning.
Accounts created via Keycloak cannot Change password, or Reset password.
When SSO is disabled, the Reset Keycloak Subject Identifier action becomes available. You can use this action to clear the field value and set a regular Planon password for the account.
For more information, see JIT user provisioning (System Settings).
Details
Department
Select the department to which the user is linked.
Telephone
Enter the user's telephone number.
Photo
Allows you to display a photo of the user.
Address
Select the user's address from the list.
Property set
This is a mandatory field.
Select a default property set in which the selected user is allowed to work.
* 
By default, a user group has all rights in all property sets. By means of an authorization filter on the Property set business object, you can restrict the number of property sets and the corresponding rights of a user group.
Time zone
This field is not visible by default. If the use of multiple time zones has been activated in user’s system, this field is mandatory. You can use this field to link a relevant time zone to a user.
Person details
Displays the details of the persons linked through the Persons link. It displays details like: code, first name, full name, department code, phone number and email.
User group details
Displays the details of the user groups linked through the User Groups link. It displays details such as system name, description and the user's permission type.
Product definition details
Displays the product definitions that are linked to the user's user group.