Manage Users

The Manage Users page is used to create internal accounts, update user identities, assign roles, activate or deactivate accounts, and end sessions.

Access requirements

• View Users (setting.user.view) shows the menu, user list, filters, and user details in read-only mode.
• Manage Users (setting.user.manage) includes view access and enables creating, editing, activating, deactivating, and revoking user sessions.
• Assigning roles also requires access to view Roles. This prevents a user administrator from assigning roles they are not allowed to inspect.

Create a user

This action requires Manage Users.

If an active-user maximum is configured, the page displays current usage. At maximum capacity, New User is disabled and the server also rejects account creation. Deactivate an account to release a slot before creating another user.

1. Open Settings > Manage Users.
2. Select New User.
3. Enter the name, email, username, and mobile number.
4. Create an initial password with at least 8 characters.
5. Choose whether the account should be active immediately.
6. Select Create User.
7. Share the initial credentials through a secure channel and ask the user to change the password.

Assign a role

1. Search for the user by name, email, or username.
2. Select View or open the user details.
3. In the roles section, select a role that matches the user's responsibilities.
4. Save the role changes.

Grant only the access the user needs. See Role & Permissions for instructions on managing roles.

Update user details

1. Open the user details.
2. Select Edit.
3. Update the name, email, username, or mobile number.
4. Select Save Changes.

Team memberships appear in the user details but are managed from Manage Teams.

Activate or deactivate an account

1. Select Activate or Deactivate for the user.
2. Review the effect of the change.
3. Confirm the action.

An inactive user cannot sign in. Before deactivating an account, reassign any unfinished approval or disbursement responsibilities.

Activating an inactive user consumes one active-user slot. When the maximum has been reached, Activate is disabled until another account is deactivated. Existing active users are not signed out when the limit is reduced below current usage.

End all user sessions

1. Open the user details.
2. Select Revoke Sessions.
3. Confirm the action.

Use this action when a device is lost, access is suspected, or the user must sign in again after an access change.

Next

Continue to Role & Permissions.