Users, roles and tenants

Who can do what, and on which data.

At a glance

  1. WhereAdministration (cog), then Users, Roles, Manage Clients; account menu, then Profile.
  2. AccessAdministration. Manage Clients needs the multi tenant module.
  3. DataNone.

What the screen shows

Users

Name, email, password, Tenants (within the licence limit), roles, and allow or deny permission overrides, global or per tenant. Creating, editing or deleting asks for your current password. Disable and Sign out of all sessions are on the user page.

Roles

Permissions grouped by licence module, with All or None per group. Supplied roles: admin, viewer, operator, auditor, helpdesk, tenant_admin and ai_user; admin and viewer cannot be renamed or deleted.

Tenants

A tenant isolates its inventory, collected data, vault, searches, assistant and backups. Deleting a tenant erases its data.

Profile

Profile Information, Update Password, Active sessions with Sign out all other sessions, and Delete Account.

What you can do

  1. 1

    Create a user

    Users, Add New User, identity and initial password, tenants, role, then your own password to confirm.

    /profile
    The Profile page.

Limits and things to know

Password rules

At least 12 characters with upper and lower case, a number and a symbol.

The last administrator

The admin role cannot be removed from the last active administrator. Careful: deleting your own account from Profile has no such guard.

Support is not given to the administrator

Support permissions are not included automatically in the admin role: grant them from Roles or on the user page.

Next chapter

Operations