Managing Users and Roles

Before you begin, note the following:

Only system administrators can add, modify and remove users and roles. To set up administrators, see Realm Configuration.
Your product has a primary user store where the users/roles that you create using the management console are stored by default. It's default RegEx configurations are as follows. RegEx configurations ensure that parameters like the length of a user name/password meet the requirements of the user store.
```
PasswordJavaRegEx-------- ^[\S]{5,30}$
PasswordJavaScriptRegEx-- ^[\S]{5,30}$
UsernameJavaRegEx-------- ^~!#$;%*+={}\\{3,30}$
UsernameJavaScriptRegEx-- ^[\S]{3,30}$
RolenameJavaRegEx-------- ^~!#$;%*+={}\\{3,30}$
RolenameJavaScriptRegEx-- ^[\S]{3,30}$
```
When creating users/roles, if you enter a username, password etc. that does not conform to the RegEx configurations, the system throws an exception. You can either change the RegEx configuration or enter values that conform to the RegEx. If you change the default user store or /wiki/spaces/RUTH100/pages/40599585, configure the RegEx accordingly under the user store manager configurations in <APIM_HOME>/repository/conf/user-mgt.xml file. For details about writing a simple custom user store manager for WSO2 products, see Writing a Custom User Store Manager.

This chapter contains the following information: