How to Add Users in the Baan / Infor LN GUI (Including Admin Access)
how to add users with baan gui
Also searched as
- infor ln admin mode
- create user in infor ln
- baan create new user and assign roles
- infor ln user data session
Short answer
In Baan and Infor LN you create a user in the User Data session (ttaad2100m000), set the user type, language, company and login details, base it on a user template, and then give the user roles through the authorization management system. You need a user with administrator rights in the Tools (tt) package to do it, and in LN 10 the identity may also have to exist in Infor OS.
Applies to: Baan IV/5 (BW GUI) and Infor LN 6.1 / 10.x (Worktop and LN UI). Session names are stable across these versions; screen layout differs.
How to create a user in Baan / Infor LN
- 1Log in with an administrator account that has authorization for the Tools User Management sessions.
- 2Start the session User Data by entering ttaad2100m000 in the session start box (or find it under Tools > User Management > User Data).
- 3Create a new record. Enter the user code (the login name), a description or full name, and select the user type.
- 4Choose the user template to inherit settings, language, printers, default company and package combination from. Using a template is far safer than filling every field by hand.
- 5Set the initial password, or leave authentication to Infor OS single sign-on if your LN 10 site uses it, and set the password change rule.
- 6Assign roles to the user in the authorization sessions (the Authorization Management System, AMS), or copy the roles from the template or another user.
- 7Run the conversion or save step your site requires so the user data is written to the runtime data dictionary tables, then ask the user to log in.
- 8Test login and open two or three typical sessions to confirm the user is authorized for them.
What admin access you need
People searching for LN admin mode are usually trying to open the user management sessions and find them greyed out or missing. In Baan and LN there is no single admin mode switch: access is granted by authorizations. Your account needs the roles for the Tools user-management sessions, and in many sites only a small group of Tools administrators have them.
In LN 10 there is a second layer. Users sign in through Infor OS (Infor Federation Services), so a new person is typically created in the Infor OS user management first, and the LN user data record is linked to that identity. If the link is missing, the user authenticates but cannot reach LN.
Users, templates and roles
A user record holds who the person is and technical settings. Which sessions they may run is controlled by roles. The clean way to run a site is to keep a small number of templates (for example buyer, planner, shop floor, finance) and a role set per template, then create users from them. This gives repeatable access and a clear audit trail.
Fields people forget: the default company, the language, the printer or device, and the package combination, because a user with the wrong package combination sees old or missing sessions. Check these before blaming authorizations.
Common reasons a new user cannot work
If the user logs in but gets a not authorized message when starting a session, the role is missing or not yet converted. Our not-authorized page walks through how to find which authorization is blocking the session.
If the user cannot log in at all, check the user type, that the account is not locked or expired, the password rule, the company assignment and, in LN 10, the Infor OS link. For BW clients also confirm the bshell can start for that user on the server.
Try it here, free
Infor LN User Role and Authorization Matrix Worksheet
Role-by-function matrix for LN access reviews, with access level, risk rating and segregation of duties flags.
Common pitfalls
- !Creating users field by field instead of from a template, which leads to inconsistent access.
- !Giving the new user the same roles as a power user to get past an authorization error. Use the authorization log to find the one missing role.
- !Forgetting the Infor OS identity in LN 10, then wondering why a correct local user cannot sign in.
- !Deleting a user instead of blocking them. Historical records refer to the user code, so deactivate and keep the record.
- !Editing production authorizations without a test user and a record of what changed.
How an ERP-grounded AI assistant handles this
A grounded assistant can answer who has access to what from the real authorization tables: which roles a user holds, which sessions a role opens, and which users differ from their template. It reads these tables and presents the findings; changes still go through your administrators in User Data. Netray runs this on-prem so authorization data stays inside your network.
Frequently asked questions
Which session creates users in Baan and Infor LN?
User Data, session code ttaad2100m000. You enter the user code, type, language and template there. Roles are then assigned through the authorization management sessions so that the user can start the sessions they need.
Is there an admin mode in Infor LN?
Not as one switch. Access to user management is controlled by authorizations on the Tools sessions, so the account needs the right administrator roles. In LN 10, user identities are also managed in Infor OS.
Why does a new user get a not authorized message?
The user has no role granting the session, or the role was changed but not yet converted or refreshed. Use the authorization tools to see which object is blocked and add only that role rather than copying a super user.
Can I copy an existing user to make a new one?
Yes, in practice you use a user template or copy the roles of a similar user. Our user template page shows the steps. Always review the copied roles for access the new person should not have, such as finance approval.
Related
How to Create an Infor LN User from a User Template and Copy Authorizations
In Infor LN you create a user in User Data, link it to a user template that carries defaults such as language, printer, company and package combination, and assign roles that grant session and table authorizations. Copying authorizations from an existing user is possible but is the least safe approach compared with role-based assignment.
Error fixInfor LN Not Authorized to Run This Session: How to Fix It
Infor LN refuses to open a session with a not authorized message when the logged-in user's assigned role does not include that session, or when the session is blocked for the company they are logged into. Grant the session through Common > Authorization Management > Roles, or check the user's role and company context, and the session opens on retry. In most cases this is a permissions configuration issue, not a bug.
How-toHow to Change or Reset a Baan / Infor LN Password
Users change their own password from the change password option in the session menu after login, and an administrator resets another user's password in the User Data session (ttaad2100m000). On Infor LN 10 sites that sign in through Infor OS, the password lives in the identity provider, so you reset it there instead of in LN.
Error fixInfor LN bshell Process Stuck at 100% CPU: How to Diagnose and Fix It
A bshell process pinned at 100% CPU on the Infor LN application server almost always means one session is stuck in a 4GL loop, scanning an unindexed table, or waiting on a database lock. End the session from the Sessions Monitor first, then kill the OS process only if that fails, and check for a blocking database transaction before assuming it is a bug.
Error fixInfor LN DAL Out of Sync After a Custom Field: Cause and Fix
Infor LN throws a DAL, or table, out of sync error, or simply drops a new custom field silently, when a table's dictionary definition is changed but the generated DAL and dependent forms are not regenerated afterward. Running the standard sequence, table compile, DAL generation, then session/form compile, in Tools > Development after every dictionary change resolves it. Skipping any one of the three steps is what causes the mismatch.
Error fixInfor LN Jobs Stuck in Active or Waiting: Fix the Job Daemon
Infor LN background jobs, reports, batch processes and print jobs, get stuck in Active or Waiting status when the job daemon on the enterprise server has stopped or lost its connection, or when a prior job crashed without releasing its status. Restart the job daemon and reset the stuck job's status through the Jobs session, and the queue resumes. A daemon that keeps stopping usually points to a memory, license or database connectivity problem on the server.
AI for ERPAI for Infor LN: Sessions, BODs, and Engineer-to-Order Work
Add grounded AI to Infor LN 10.x or CloudSuite: natural-language answers over sessions and BODs, agents for project and engineer-to-order work, on-prem options.
AI for ERPAI for Legacy Baan IV/V: Capture the Knowledge Before It Walks Out the Door
Use AI to capture knowledge from ageing Baan IV/V systems, document undocumented customisations, and de-risk a future migration to LN or CloudSuite.
Stuck on Infor LN / Baan?
Talk to engineers who work inside Infor LN / Baan every week, and who build private AI that answers these questions from your own ERP data.
Keep exploring
Free tools
- Infor LN User Role and Authorization Matrix WorksheetRole-by-function matrix for LN access reviews, with access level, risk rating and segregation of duties flags.
- Infor LN User Access Review ChecklistA practical checklist for periodic review of who can do what in Infor LN, covering roles, privileged access and segregation of duties.
- Infor LN and Baan Integration Interface Specification TemplateFill-in functional and technical specification for an LN or Baan interface, including data flow, error handling and volumes.
ERP fixes and how-tos
- How to Create an Infor LN User from a User Template and Copy AuthorizationsCreate Infor LN users from user templates and roles, copy authorizations safely, and avoid the common mistakes that give new users too much or too little.
- Infor LN Not Authorized to Run This Session: How to Fix ItInfor LN blocks a user with a not authorized to run this session message. Here is what the authorization check verifies and how to grant access fast.
- How to Change or Reset a Baan / Infor LN PasswordHow to change your own Baan or Infor LN password, how an administrator resets one in User Data, and what to check when LN 10 uses Infor OS single sign-on.
Guides
- AI Integration with Infor LN and Baan: A Technical GuideIntegrate AI with Infor LN or Baan: ION API patterns, business object documents, session versus web service access, and where AI agents should not write.
- BAAN 5 to Infor LN Complete Migration GuideMigrate from BAAN 5 to Infor LN comprehensively. 4GL analysis, data transformation, business process mapping, and organizational change management.
- Building and Modifying Infor LN Sessions: Developer GuideLearn to create and modify Infor LN sessions including form design, field triggers, choice fields, zoom sessions, and session-to-session communication patterns.
Integrations
- How to add AI agents to Baan IV and Baan VHow to add AI agents to Baan IV or Baan V: tool layer over read-only database access and AFS, human approval on writes, and an on-prem model. A practical guide.
- How to add WhatsApp to Infor LNHow to connect WhatsApp to Infor LN: ION BODs and APIs, template messages, opt-in rules, supplier confirmations and order status, including on-prem LN setups.