updated documentation for unmanaged user.
@@ -3,10 +3,14 @@ subcategory: "User"
---
# Artifactory Unmanaged User Resource
-Provides an Artifactory unmanaged user resource. This can be used to create and maintain Artifactory users.
-
+Provides an Artifactory unmanaged user resource. This can be used to create and manage Artifactory users.
+The password is required field by the [Artifactory API](https://www.jfrog.com/confluence/display/JFROG/Artifactory+REST+API#ArtifactoryRESTAPI-CreateorReplaceUser), but we made it optional in this resource to accommodate the scenario, when the password is not needed and will be reset by the actual user later.
When the optional attribute `password` is omitted, a random password is generated according to current Artifactory password policy.
+~> The generated password won't be stored in the TF state and can not be recovered. The user must reset the password to be able to log in. An admin can always generate the access key for the user as well. The password change won't trigger the state drift.
+
+~> This resource is an alias for `artifactory_user` [resource](https://registry.terraform.io/providers/jfrog/artifactory/latest/docs/resources/user), it is identical and was added for clarity and compatibility purpose.
+
## Example Usage
```hcl
@@ -30,7 +34,7 @@ The following arguments are supported:
* `profile_updatable` - (Optional) When set, this user can update his profile details (except for the password. Only an administrator can update the password). Default value is `true`.
* `disable_ui_access` - (Optional) When set, this user can only access Artifactory through the REST API. This option cannot be set if the user has Admin privileges. Default value is `true`.
* `internal_password_disabled` - (Optional) When set, disables the fallback of using an internal password when external authentication (such as LDAP) is enabled.
-* `groups` - (Optional) List of groups this user is a part of.
+* `groups` - (Optional) List of groups this user is a part of. **Notes:** If this attribute is not specified then user's group membership set to empty. User will not be part of default "readers" group automatically.
## Import
@@ -39,3 +43,7 @@ Users can be imported using their name, e.g.
```
$ terraform import artifactory_unmanaged_user.test-user myusername
```
+
+## Managing groups relationship
+
+See [our recommendation](guides/user_group.md) on how to manage user-group relationship.
\ No newline at end of file
