← Back to Articles
Create VTM User Accounts for Domain Manager 3.x and later
Last Updated: July 02, 2026

This is an optional procedure for adding additional accounts to the VTM other than the default administrator account, halouser.

Before beginning this procedure, the following things must be completed or available:
  • A Domain Manager 3.x server meeting VTM requirements is installed and running.
  • VTM is installed on the Domain Manager.
  • The credentials for the admin account for Keycloak on the Domain Manager are known.
If necessary, log into KeyCloak:
  1. In a web browser, go to https://[DOMAIN_MANAGER_IP]/auth/ where [DOMAIN_MANAGER_IP] is the IP address of Domain Manager.

    The KeyCloak UI appears.

  2. Select Administrative Console.
  3. Sign in with the following information:
    Username or email
    admin
    Password
    Administrative password returned earlier in this procedure.
Create User Account(s):
  1. Change the realm from Master to Halo by using the Realm pull-down in the top-left corner.
  2. Select Users from the left-hand panel.
  3. Create the necessary User Account(s):
    1. Click Add User.
      The Add user screen appears.
    2. Complete the following information as indicated:
      Username (REQUIRED)
      A unique username for this user.
      Email (OPTIONAL)
      An email address to reach this user.
      First Name (OPTIONAL)
      The given name of this user.
      Last Name (OPTIONAL)
      The family name of this user.
      User Enabled?
      ON: This user account can be logged into. OFF: This user account is disabled.
    3. Click Create.
    4. Repeat the above steps as many times as necessary for additional users.
  4. Assign the User Role for each new User Account:
    1. Click on the Username field for the User Account which needs a role assigned.
    2. Select the Role mapping tab.
    3. Select one of the following Available Roles:
      default-roles-halo
      Administrative Account. Select this role if the user should have full control over VTM.
      Limited Write
      Operator Account. Select this role if the user should be restricted to modify Service Groups. They will be limited to the following functions:
      • Mute transport streams in a Service Group.
      • Add/modify/delete Service Catalog Entries to/from transport streams in a Service Group.
      • Assign/unassign RxDs to a Service Group.
      Important: If no Role is assigned to a user, they will have Read Only permissions. They can log into the VTM and view its current settings and conditions but make no changes to the system.
    4. Click Assign role.
    5. If other roles are assigned, select any unneeded user roles for this user.
      NOTE: A User Account with multiple roles will always receive the most privileges of each Role.
    6. Click Unassign.
    7. Repeat these steps for each new User Account.
  5. Set the Password for each new User Account created:
    1. Click on the Username field for the User Account which needs a password set.
    2. Select the Credentials tab.
    3. Click Set password.

      The Set passowrd for [USER] window appears.

    4. Enter a temporary password in the Password field.
    5. Confirm the password by repeating it in the Password Confirmation field.
    6. Set the Temporary switch to Off.
    7. Click Save.
    8. Repeat these steps for each new User Account.
Each user may have been assigned a User Role and can now log in with the temporary password. They will be prompted to change the password to something unique on their first login.