Skip to main content

Managing Users

Viewing Users​

The Users page of the Admin console (URL path /v2/admin, also /v2/admin/users) lists the account's users, the roles assigned to each, and how each one signs in. It is the page the Admin console opens on, titled Users with the subtitle Accounts that can sign in to this Fluency site, their roles, and how they authenticate., with the Add User button in the upper-right corner.

Users page showing four summary tiles, a search field, and a table of five users with their roles and sign-in method, the three local sign-in users with Edit, Reset Password and Delete actions and the two OAuth users with Edit and Delete

The page itself, control by control, is documented in the interface reference at Users.

Below the header are four summary tiles (Users, Local sign-in, OAuth, and Roles in use), then a search field (Search name, email, or role) and the user table. The table has five columns:

  • Name: the user's full name.
  • Email: the user's email address.
  • Roles: a badge for each role the user holds.
  • Sign-In: how the user authenticates: Local for a username and password, or the OAuth provider's name, such as Google.
  • Actions: Edit and Delete for that row, plus Reset Password for a user who signs in locally.

Adding a User​

To add a user, click Add User on the Users page to open the Add User dialog. Every field under User Information is required.

Add User dialog with the User Information fields, an empty Roles list, and the OAuth switch off under User Authentication

The dialog is a single form in two sections:

User Information

  • First Name and Last Name: side-by-side name fields.
  • Username: the sign-in name, for example JaneSmith1.
  • Email: the user's email address.
  • Company: the user's organization.
  • Roles: pick a role from the Add… drop-down to give it to the user; each chosen role appears as a chip with an × that removes it. A user can hold several roles.

User Authentication

  • OAuth: a switch, off by default. Off, the user signs in locally with a username and password. On, the user signs in through an identity provider, chosen from the required Provider drop-down that appears beneath the switch: Azure AD or Google.

Add User dialog with the OAuth switch on and the Provider drop-down open, offering Azure AD and Google

Click Add to create the user, or Cancel to close the dialog without saving. If a field is missing or not valid, the dialog stays open and a red band at the top of the page names the first problem, such as Please enter a first name.; correct it and click Add again. When the user is added, the band reads Added followed by the username and the address the email was sent to. The messages are listed on Users → Add User.

Policies are not set on the user; they are attached to the roles you assign. See Managing Roles and API Tokens for the Admin console pages where they are defined (v1: the Settings → Advanced → Permissions tabs).

Welcome Email​

An automated Welcome email will be sent to the email address specified above from Fluency Admin to confirm the user addition. For accounts with the User/Password authentication method, this email will also contain the login Username and a randomly generated Password.

Automated welcome email from Fluency Admin confirming the new account, with the login username and generated password

Editing a User's Profile and Access​

Once a user has been added to the system, their details and roles can be modified at any time from the Users page.

On the Users page, locate the user in the table and click Edit in the row's Actions column. The Update User dialog opens, carrying the same fields as Add User, pre-filled with the user's current values.

Update User dialog pre-filled with a user's name, company, and admin role chip, with the Username field read-only and the OAuth switch off

Every field except Username can be modified; the username is fixed once the account exists and is shown read-only:

  • First Name, Last Name, Email, Company
  • Roles: existing roles appear as chips; add one from Add…, or remove one with its ×. At least one role is required.
  • OAuth and Provider: under User Authentication

Refer to Adding a User for the meaning of each field. Click Update to save the changes, or Cancel to close the dialog without saving. A local user's password is reset from the row rather than from this dialog: see Resetting a Password.

Access is granted through the Roles field rather than by attaching policies to the user directly: the API and data policies come from the role. The legacy interface's per-user API-policy, data-policy, and home-page fields are in neither the v2 nor the v1 dialog.

Note: Changing the role takes effect on the user's next login or page refresh.

Resetting a Password​

For accounts using local sign-in, click Reset Password in the user's row on the Users page. The Reset Password dialog (Set a new password for the username) asks for the New Password, at least eight characters long, and the same password again under Confirm Password. Click Reset to set it, or Cancel to close the dialog without changing anything.

Reset Password dialog for a local sign-in user, with the New Password and Confirm Password fields and the Cancel and Reset buttons

A password that is too short or does not match its confirmation is refused inside the dialog (Password needs to be at least 8 characters long., Passwords do not match.). When the password is set, the page reports Password reset for followed by the username, and the user can sign in with the new password straight away.

For accounts using OAuth2, password management is handled by the identity provider (Azure AD or Google) and not by Fluency.

Users change their own password from their Profile page, reached from the account avatar rather than from the Admin console (v1: Settings): see Login → Changing your password.

Disabling a User​

Legacy interface

The disable (lock) toggle described below belongs to the legacy interface. The Users page has no such toggle in either the v2 or the v1 interface: its per-row controls are Edit, Reset Password, and Delete in v2, and edit and delete in v1. Treat deleting the account (or, in v1, removing the user's roles) as the way to stop access; in v2 the Update User dialog requires at least one role.

If you do not want the user to be deleted but only want their access stopped, use the disable button (lock icon). This is a toggle icon on the far right in the user row. Click the icon to disable or re-enable the user.

A disabled user is preserved in the system (their profile, role, and audit history remain), but they cannot log in.

Deleting a User​

Deleting is done one user at a time from the row itself; there are no per-user checkboxes and no header-level bulk delete in either interface.

  1. Locate the user in the table on the Users page; the search field narrows it by name, email, or role.
  2. Click Delete in the row's Actions column.
  3. A Delete User confirmation asks Are you sure you want to delete followed by the username. Confirm it to delete the account, or cancel to keep it. The page then reports Deleted followed by the username.
Warning: The Delete action removes the user from the system completely.

The deletion is recorded in the audit log as a Delete User entry in the management category, attributed to the administrator who performed it; see Audit.

Best practice: review inactive accounts

It is best practice to disable or delete users that have not accessed the system in thirty (30) days. Some standards, such as NIST 800-53, require ongoing administrative activity to maintain an account.