User Management

User Management as described here refers to Tenants with Dashboard function and Role rights. FYI: A Administration Tenant has no "Roles".

There are five other sub-functions in this area.

User	Access Rights and system roles of a user can be viewed and edited here. Users can also be invited to or removed from the Tenant.
Inherited Users	Users with Access Rights from Tenants, which are at a higher level than this Tenant and have been inherited, can be viewed here.
Custom Roles	Individual Roles can be managed and assigned to specific users here.
Pending Invitations	Invitations to users that have not yet been accepted can be viewed here.
Pending Requests	Only relevant for "Public Tenants": Every request (user wants to be unlocked for Tenant) is displayed here.

Sub-function "User"

Add Access Right

Access Rights

Access rights are only applied to the Administration of a Tenant. A distinction is made between the rights View, Manage and Create.

View → It is possible to view the administration of the Tenant.
Manage → It is possible to edit the administration of the Tenant, manage Users and accept Contracts and Directives.
Create → It is possible to create new Tenants and distribute quota to subordinate Tenants.

Access rights are automatically inherited by sub-Tenants.

To add an access right, click the "+" button, the following pop-up window then opens. By clicking the desired right, it is added automatically.

Remove Access Right

An access right can be removed by clicking the "x" on the right to be removed. Clicking the "x" opens the following pop-up window. Here you can select whether the access right is only to be removed locally or whether all legacies (related to sub-Tenants) are to be removed.

Add System Roles

System Roles

A Role allows access to the Dashboard and Configuration elements of a Tenant with specific Rights. System Roles are default roles with unchangeable predefined rights.

A distinction is made between the following System Roles in the "User" sub-function:

Read User → It is possible to view the following elements of the Tenant: Dashboard and Configuration. Setpoints can also be set.
Read/Write User → It is possible to edit the following elements of the Tenant: Dashboard and Configuration. The “Read User” system role is included.
Super User → It is possible to manage Access Rights in the Configuration Structure. The “Read/Write User” system role is included.

For data protection reasons, the role rights specified here must always be granted again separately for sub-Tenants. Only the option to access the administration (access rights) is automatically inherited.

To add a System Role, click the "+" button, the following pop-up window then opens. By clicking the desired System Role, it is added automatically.

Remove System Roles

A System Role can be removed by clicking the "x" on the role to be removed.

Add User

If you want to invite a user into a Tenant, you only need to do this within the desired Tenant as described below. The user does not automatically have access to the higher-level Tenants, but does have access to all sub-Tenants (access rights only).

Users unknown to the system will receive an invitation link by mail, which is valid for 2 days. If this time expires, the users can work via the forgotten password function to fulfill the invitation.

To invite a user or to add a Tenant, click the "+" button (see above), the pop-up window below then opens. Suitable rights can be assigned to the user at the same time as the invitation. To do this, simply open the "Roles and Access Rights" area and click the "+". The invitation can then be sent. The invited user then receives a message via the user feed with a request to accept.

Remove User

To remove a user, click the trash can icon.
The following pop-up window opens:

Search Users

The search bar allows you to search for users by their username.
If there is a match, the filtered users are displayed.

Sub-function "Legacy User"

This sub-function displays all users who have access rights from parent Tenants. Access rights are automatically inherited from Tenants to sub-Tenants.

Sub-function "Individual Roles"

Individual Role

An individual role allows access to Dashboards and Configuration of the Tenant with previously self-configured individual rights. This can be used, for example, to grant or deny access to very specific elements of the configuration.

You can create a new individual role in the configuration of the respective Tenant under the configuration widget "Roles" in each group. After it has been created and saved, it appears in the "Administration" in this sub-function by clicking the "+". You can now assign individual rights to this individual role in the respective group. For more information see chapter Access Rights.

An individual role can be assigned additionally to a system role. Multiple users can be assigned to a role. Multiple individual roles can be created.

Remove User from Individual Roles

To remove a user from an individual role, click the following icon:

Sub-function "Pending Invitations"

Invitations that were sent to a user but not yet accepted are displayed here.

Sub-function "Pending Requests"

The function is only relevant for "Public Tenants", as this concerns requests from users who want to be activated for DEMO applications or public Tenants.