---
title: 'Tutorial: Adding Users to Access Server'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--adding-users/
product: Access Server Docs
description: This tutorial covers authentication, creating users, and downloading OpenVPN Connect.
---

# Tutorial: Adding Users to Access Server

## Overview

This document provides an overview of setting up authentication, creating users, and downloading OpenVPN Connect, which are all essential to launching your VPN.

## Prerequisites

- An installed Access Server.
- Admin Web UI access.

## Step 1: Set up authentication

Configure your server's authentication before adding any user accounts. The default authentication method is local, where the authentication resides on your server.

Refer to the appropriate tutorials:

- [LDAP tutorials](https://openvpn.net/as-docs/tutorials/ldap.md)
- [RADIUS tutorials](https://openvpn.net/as-docs/tutorials/radius.md)
- [SAML tutorials](https://openvpn.net/as-docs/tutorials/saml.md)
- [PAM tutorial](https://openvpn.net/as-docs/tutorials/pam.md)

## Step 2: Add new users in the Admin Web UI

> **Tip**
>
> This is an important step for local authentication. If you use LDAP, RADIUS, or SAML, your users should exist with your identity provider. You can add them in the Admin Web UI to create [access control](https://openvpn.net/as-docs/access-control.md) rules, a recommended security step.

1. Sign in to the Admin Web UI.
2. Click **User Management \> User Permissions**.
3. Enter the username in the **New Username** field on the last table row.
4. Configure the settings for the new user with the checkboxes:
   - Click **Admin** to promote the user to an admin.
   - Click **Allow Auto-login** to allow downloading an [auto-login profile](https://openvpn.net/as-docs/connection-profiles/#connection-profile-types).
   - Click **Deny Access** to prevent the user from gaining access to the server.
   - Click **Delete** to remove the user profile from Access Server.
5. Click **More Settings**.
   - Additional user settings display.
6. Select the user's authentication method.

   > **Tip**
   >
   > You can leave the authentication as the default method or choose a different authentication method by selecting the radio button. If the option is disabled, you must first configure the authentication method before it’s available for users.
7. Enable MFA if desired.
8. Enter a password in the **Password** field.
9. Select between dynamic or static IP address assignments.

   > **Important**
   >
   > If you assign a static IP address, ensure it's within the network defined in **Configuration \> VPN Settings**.
10. Select between [NAT or routing](https://openvpn.net/as-docs/nat---routing.md).
11. Limit your user to specific networks by entering the subnets under **Allow Access To these Networks**.
12. Select whether to create the user as a gateway client.
13. Permit traffic from the server to the client with the DMZ settings. Ensure you specify the IP address, port, and service. The image below shows how an Access Server node with the IP address 192.168.102.111 can send traffic to the user client using the TCP protocol on port 80:
14. Select **Save Settings** and **Update Running Server**.

## Step 3: Download OpenVPN Connect from the Client Web UI

Once you've set up your users, they can sign in to your Access Server Client Web UI and download either a preconfigured OpenVPN Connect client or a connection profile. If you’ve already set up a [hostname](https://openvpn.net/as-docs/tutorials/tutorial--custom-hostname.md), your users can navigate to that hostname in a browser, such as vpn.example.com. If you aren’t using a hostname, your users must go to the IP address of your server. Users sign in with their credentials on the Client Web UI and choose which app they want to download for their OS.

Your users can also [download OpenVPN Connect](https://openvpn.net/client/) directly from our website. After downloading, they install and launch the app, click to add a new connection, enter the Client Web UI URL with their credentials, and import their profile.

## Step 4: Purchase a subscription license to add connections

Access Server provides you with two free connections. You can test out your network setup before making any commitments or purchases. You can purchase a subscription when you’re ready to add more devices.

You can find details about pricing here: [Access Server Pricing](https://openvpn.net/pricing/).

---

Prev: [User and Group Setup](https://openvpn.net/as-docs/tutorials/user-and-group-setup.md)
Next: [Tutorial: Adding Groups to Access Server](https://openvpn.net/as-docs/tutorials/tutorial--adding-groups.md)
Index: https://openvpn.net/as-docs/llms.txt