User Management

The Users section of the Control Center allows administrators to create, manage, and monitor user accounts across the system.

Viewing Users

User List

Navigate to Control Center > Users to see all users in the system. The user list displays:

• User name and avatar
• Username/email
• Status (Active/Inactive)
• Assigned roles
• Last login date

Filtering Users

Use the tabs and search to find specific users:

Filter	Description
All	Shows all users regardless of status
Active	Shows only enabled users
Inactive	Shows only disabled users
Search	Filter by name, username, or email

Creating a New User

Step 1: Navigate to Create User

1. Go to Control Center > Users
2. Click the Create User button
3. Fill in the required information

Step 2: Enter User Details

Field	Required	Description
Name	Yes	The user's full display name
Username	Yes	Unique identifier for login
Email	Yes	User's email address
Password	Yes	Initial password for the account

Step 3: Assign Initial Role (Optional)

You can assign a role during user creation or do it later from the user's profile.

Step 4: Save

Click Create to create the user account. The user can now log in with the provided credentials.

Editing a User

Accessing User Profile

1. Go to Control Center > Users
2. Click on the user's name or the edit icon
3. Make changes to the user's information

Editable Fields

Field	Description
Name	User's display name
Username	Login identifier
Email	Contact email
Avatar	Profile picture

Note: Some fields like username may have restrictions to prevent conflicts with existing accounts.

Managing User Status

Enabling a User

If a user account has been disabled:

1. Find the user in the user list (check the Inactive tab)
2. Click on the user to open their profile
3. Click Enable User
4. The user can now log in again

Disabling a User

To temporarily revoke a user's access:

1. Find the user in the user list
2. Click on the user to open their profile
3. Click Disable User
4. The user will be logged out and cannot log in until re-enabled

Important: Disabling a user does not delete their data. All their records, activity logs, and assignments are preserved.

Password Management

Generating a Temporary Password

If a user forgets their password or needs a reset:

1. Open the user's profile
2. Click Generate Password
3. A secure temporary password will be generated
4. Share the password securely with the user
5. The user will be required to change their password on next login

Generated passwords include:

• 12 characters minimum
• Uppercase and lowercase letters
• Numbers
• Special characters

Setting a Specific Password

Administrators can also set a specific password:

1. Open the user's profile
2. Click Set Password
3. Enter the new password
4. The user will be required to change it on next login

Security Note: Always communicate passwords through secure channels. Never send passwords via unencrypted email.

Managing User Roles

Viewing Assigned Roles

A user's current roles are displayed on their profile page, showing:

• Role name
• Organization scope (if applicable)
• Assignment date

Assigning a Role

1. Open the user's profile
2. Click Assign Role
3. Select the role from the dropdown
4. (Optional) Select an organization if the role is organization-specific
5. Click Assign

Removing a Role

1. Open the user's profile
2. Find the role in the assigned roles list
3. Click the remove icon next to the role
4. Confirm the removal

Note: Some roles may be organization-scoped, meaning the user only has that role's permissions within a specific organization and its sub-units.

Viewing User Activity

Activity Logs

To see what actions a user has performed:

1. Open the user's profile
2. Navigate to the Activity Logs tab
3. View the chronological list of activities

Activity logs show:

• Date and time
• Action performed
• Affected resource
• Additional details

Filtering Activity Logs

Filter	Description
Date Range	Filter by specific time period
Event Type	Filter by action type (created, updated, deleted)
Log Name	Filter by module or category

Managing User Sessions

Viewing Active Sessions

To see where a user is currently logged in:

1. Open the user's profile
2. Navigate to the Sessions tab
3. View all active sessions

Session information includes:

• Device type and browser
• IP address
• Last activity time
• Login time

Understanding Session Data

Field	Description
Browser	The web browser being used
Device	Operating system and device type
IP Address	Network address of the connection
Last Activity	When the session was last active

User Statuses Explained

Status	Description	Can Login?
Active	Normal account status	Yes
Inactive/Disabled	Account has been disabled by admin	No
Password Reset Required	User must change password on next login	Yes (then must reset)

Best Practices

Creating Users

1. Use meaningful usernames - Make usernames easy to remember and identify
2. Set strong initial passwords - Use the generate password feature
3. Assign appropriate roles - Only give users the access they need
4. Document the purpose - Keep records of why accounts were created

Managing Existing Users

1. Regular audits - Periodically review user accounts
2. Disable instead of delete - Preserve audit trails by disabling rather than deleting
3. Monitor activity - Check activity logs for unusual behavior
4. Prompt role reviews - Review roles when job functions change

Security Recommendations

1. Enforce 2FA - Encourage all users to enable two-factor authentication
2. Regular password changes - Implement password rotation policies
3. Session monitoring - Review active sessions for suspicious activity
4. Principle of least privilege - Assign minimum necessary roles

Common Tasks

Onboarding a New Employee

1. Create a new user account
2. Generate a secure temporary password
3. Assign appropriate roles
4. Send login credentials securely
5. Guide them to set up 2FA

Offboarding an Employee

1. Disable the user account (do not delete)
2. Remove sensitive roles
3. Review and reassign any pending tasks
4. Document the offboarding date

Investigating Security Concerns

1. Check the user's activity logs
2. Review active sessions
3. If suspicious, disable the account
4. Generate a new password if account was compromised
5. Review audit logs for affected resources