User Management

Register, edit, and manage every user in your organization from one screen — separate from per-smarttable access.

ℹ️ Not the Same as Access Management Access Management controls who can use a specific smarttable. User Management is org-wide: it's where users exist in the first place, and where licenses, passwords, and system-wide roles are handled.

The Users Table

User Management — Users table

Each row is one user in your organization, with a filter panel and Excel export available from the toolbar.

ColumnWhat It Does
EditOpens the Edit User modal (name, email, username)
Name / Email / UsernameBasic identity fields
Reset PasswordResets the user's password in one click
User AttributesOpens a modal to set this user's value for each org-defined attribute
Has AccessToggle to block or restore the user's login without deleting them
Signature✓/✗ indicator showing whether the user has a signature on file for attestation
Revoke LicensePermanently revokes the user's license

Registering New Users

Click Add Users to open the Register New Users modal:

  1. Choose whether new users register by Email or Username
  2. Enter one value per row in the spreadsheet-style grid — paste in a whole list at once if you like
  3. Optionally set a default value for any org-defined user attribute, applied to every user being added
  4. Click Register

Registration happens in bulk — if some rows fail (e.g. a duplicate username) the rest still succeed, and you'll see which ones failed and why.

What the new user receives

The two registration types start the user off differently:

Registered byWhat happens
Username The account is created with a random one-time password. A dialog lists each new user's one-time password, with a button to copy them all. Hand each one to its user over a secure channel. The dialog is the only place these passwords appear: they can't be looked up later.
Email The user gets an invitation email with a Setup your account button. The link opens a screen where they enter their name, choose a username and set a password that meets the password rules. The link is valid for 7 days and works once. Until they finish, their row in the Users table has no username, and only Edit and Send account setup mail again (under their email) are available on it.
ℹ️ Expired invitations If an invitee lost the mail or their link has expired, click Send account setup mail again under their email in the Users table. They get the same mail with a new link, valid for another 7 days. It can be sent once a minute per user.

First Sign-In

A user signing in with a one-time password has to change it before doing anything else. This applies to their first sign-in and to the first sign-in after an admin reset. The Update Password dialog opens straight away and can't be closed until the change is made. It asks for the current password (the one-time password) and a new one. Once it's saved, the user carries on to the app or sub-app they normally land in.

Blocking vs. Revoking

These look similar but are not the same action:

ActionEffectReversible?
Has Access toggle ("hold") Blocks login immediately. The account, history, and license slot are untouched. Yes — toggle it back on
Revoke License Frees the license slot entirely. The user loses access to all smarttables and data. No — must type REVOKE to confirm
⚠️ Revoke Is Permanent Use the Has Access toggle for temporary situations (leave, investigation, offboarding in progress). Only use Revoke License when you're certain — it cannot be undone from the UI.

Resetting a Password

Clicking Reset Password replaces the user's password with a new random one-time password and shows it to you once, to hand over. It also signs the user out on every device. At their next sign-in they must choose their own password (see First Sign-In). Admin resets don't send an email. A user who has an email address on file can reset their own password instead (see Forgot Password).

Forgot Password

Users can reset their own password from the sign-in screen:

  1. Click Forgot Password? under the password field
  2. Enter your username or registered email address and click Send Password Reset Mail
  3. Open the email and click Reset Password
  4. Choose a new password that meets the password rules

If you sign in to an organization, enter it on the sign-in screen before clicking Forgot Password?, so the right account is found. For security, you see the same confirmation whether or not a matching account exists, so if no email arrives, check the username and organization.

The link is valid for 10 minutes and works once. Resetting your password this way signs you out on every other device.

⚠️ Needs an email address The reset link can only be sent if your account has an email address and is active. If your account has a username only, ask your admin to reset your password from User Management.

Password Rules

The same rules apply everywhere a password is set: account setup, first sign-in, Update Password, Forgot Password and admin-issued passwords being replaced. A new password must:

  • be at least 8 characters long
  • not be too similar to your username, name or email address
  • not be a commonly used password
  • not be made up entirely of numbers
  • be different from your current password (when changing it)

The password dialog checks each rule as you type, and the save button stays disabled until all of them pass.

ℹ️ Failed sign-ins After 5 failed sign-in attempts within 5 minutes, the account is locked for 5 minutes. Wait, then try again, or use Forgot Password.

Granting System Admin

Open Edit User for the target user. If you're logged in as the org's original systemadmin account (not just any user with the System Admin role) and the target doesn't already have that role, a Make System Admin button appears.

💡 Confirmation Required Like revoking a license, granting System Admin requires typing PROMOTE to confirm — this is a full administrative grant over the organization, so it's deliberately hard to do by accident.

Your Own Account

Separate from managing other users, every user manages their own account from the profile menu (top-right avatar icon):

OptionWhat it does
Update PasswordChange your own password (different from an admin's one-click Reset Password on another user)
Two-Factor AuthEnable TOTP-based MFA using any standard authenticator app. A QR code and manual key are shown once, at setup — see Security & Compliance for how this fits into the platform's authentication model.
My SignatureDraw or upload a signature image on file, used for Attestation and for signing off approval-workflow actions
Notification SettingsPersonal notification preferences — see Notifications
Sync LogRecent offline-sync activity for your own session — see Offline Mode
LanguageSwitch the interface language instantly, no page reload
StorageServer disk usage (e.g. 240.79 / 460.4 GB) — a live indicator of the whole install's storage headroom, not just your own usage
Profile menu — Update Password, Two-Factor Auth, My Signature, Notification Settings, Sync Log, Language, Storage, User Attributes, User Management, Download Backup, Instance Management
ℹ️ My Signature — one signature, many uses A signature saved here is reused everywhere a signature is needed — attesting an entry, signing an approval action with a comment, etc. — rather than being drawn fresh each time. It's stored once per user, not per feature.