There are five other sub-functions in this area.
Access Rights and system roles of a user can be viewed and edited here. Users can also be invited to or removed from the Tenant.
Users with Access Rights from Tenants, which are at a higher level than this Tenant and have been inherited, can be viewed here.
Individual Roles can be managed and assigned to specific users here.
Invitations to users that have not yet been accepted can be viewed here.
Only relevant for "Public Tenants": Every request (user wants to be unlocked for Tenant) is displayed here.
Add Access Right
Access rights are only applied to the Administration of a Tenant. A distinction is made between the rights View, Manage and Create.
View → It is possible to view the administration of the Tenant.
Manage → It is possible to edit the administration of the Tenant, manage Users and accept Contracts and Directives.
Create → It is possible to create new Tenants and distribute quota to subordinate Tenants.
Access rights are automatically inherited by sub-Tenants.
To add an access right, click the "+" button, the following pop-up window then opens. By clicking the desired right, it is added automatically.
Remove Access Right
An access right can be removed by clicking the "x" on the right to be removed. Clicking the "x" opens the following pop-up window. Here you can select whether the access right is only to be removed locally or whether all legacies (related to sub-Tenants) are to be removed.
Add System Roles
A Role allows access to the Dashboard and Configuration elements of a Tenant with specific Rights. System Roles are default roles with unchangeable predefined rights.
A distinction is made between the following System Roles in the "User" sub-function:
For data protection reasons, the role rights specified here must always be granted again separately for sub-Tenants. Only the option to access the administration (access rights) is automatically inherited.
To add a System Role, click the "+" button, the following pop-up window then opens. By clicking the desired System Role, it is added automatically.
Remove System Roles
A System Role can be removed by clicking the "x" on the role to be removed.
If you want to invite a user into a Tenant, you only need to do this within the desired Tenant as described below. The user does not automatically have access to the higher-level Tenants, but does have access to all sub-Tenants (access rights only).
Users unknown to the system will receive an invitation link by mail, which is valid for 12 hours. If this time expires, the users can work via the forgotten password function to fulfill the invitation.
To invite a user or to add a Tenant, click the "+" button (see above), the pop-up window below then opens. Suitable rights can be assigned to the user at the same time as the invitation. To do this, simply open the "Roles and Access Rights" area and click the "+". The invitation can then be sent. The invited user then receives a message via the user feed with a request to accept.
To remove a user, click the trash can icon.
The following pop-up window opens:
The search bar allows you to search for users by their username.
If there is a match, the filtered users are displayed.
Sub-function "Legacy User"
This sub-function displays all users who have access rights from parent Tenants. Access rights are automatically inherited from Tenants to sub-Tenants.
Sub-function "Individual Roles"
An individual role allows access to Dashboards and Configuration of the Tenant with previously self-configured individual rights. This can be used, for example, to grant or deny access to very specific elements of the configuration.
You can create a new individual role in the configuration of the respective Tenant under the configuration widget "Roles" in each group. After it has been created and saved, it appears in the "Administration" in this sub-function by clicking the "+". You can now assign individual rights to this individual role in the respective group. For more information see chapter Access Rights.
An individual role can be assigned additionally to a system role. Multiple users can be assigned to a role. Multiple individual roles can be created.
Remove User from Individual Roles
To remove a user from an individual role, click the following icon:
Sub-function "Pending Invitations"
Invitations that were sent to a user but not yet accepted are displayed here.
Sub-function "Pending Requests"
The function is only relevant for "Public Tenants", as this concerns requests from users who want to be activated for DEMO applications or public Tenants.