Managing users
Users lists everyone who already has access to your workspace. It is where you check someone’s state, correct their details, and switch an account off or on again.
- The Access Control module visible in your left-hand navigation.
- These permissions: Identity & Users · User — Read, Identity & Users · User — Update.
- Nothing is hidden by permission here — every icon renders for everyone, and an action you are not entitled to fails when you select it.
If Access Control isn't in your navigation, your role doesn't have visibility for it — ask a workspace administrator, or see Permissions and module visibility.
Steps
Select Access Control in your left-hand navigation. It opens on Users; the rail beside it also holds Roles, Departments, Groups and Invitations.
Type into Search by user, roles, dept, groups in the header — one box, shared by every tab, matched on the server. Rows per page shows 10, 20, 50 or 100; Refresh List re-reads everything and reports Data refreshed successfully.
Each row carries USER NAME, EMAIL, STATUS, ROLE, DEPARTMENT, GROUP and JOINED. STATUS is ACTIVE, PENDING, DISABLED or DELETED; a dash means nothing is set.
Select the name to open User Details. Change Display Name, or the Department and Group pickers, then Save — User updated successfully! confirms it.
The ACTIONS icons follow STATUS. ACTIVE and PENDING offer Revoke Sessions, Password Reset, Reset MFA, Disable and Delete; DISABLED offers only Activate and Delete. All but Password Reset and Reset MFA ask you to confirm — Yes, Disable, Yes, Activate, Yes, Delete, Yes, Revoke — the other two fire at once.
What success looks like
- STATUS on the row changes: DISABLED after Yes, Disable, ACTIVE after Yes, Activate.
- A message confirms it — User disabled successfully!, User activated successfully!, Sessions revoked successfully!, MFA reset successfully! or User updated successfully!
- Password Reset instead opens Password change requested successfully!, which you dismiss with Close.
What you cannot change here
Role in User Details is always disabled and reads No roles assigned — a person’s role is fixed when they are invited. There is no sorting and no filter on STATUS, so "show me every disabled person" is not possible, and DELETED people stay in the list.
If something goes wrong
| Symptom | Likely cause | What to do |
|---|---|---|
| Access Forbidden replaces the whole module. | A request was refused — the roles, departments and groups behind the columns need read permission too. | Select Go Back, then ask an administrator — see Permissions reference. |
| Someone you expect is not listed. | The shared search box still holds a term, or they were invited and have not accepted. | Clear Search by user, roles, dept, groups, then check Invitations. |
| ROLE, DEPARTMENT or GROUP shows a dash for a real member. | Only the first 100 roles, departments and groups are matched to names. | Confirm from Departments or Groups. |
| Failed to update user. Please try again. | One part of the save failed, so none of it was applied. | Reopen User Details and select Save again. |
| User Details offers more than the row does. | The account is DELETED; the panel does not narrow its actions. | Treat the row’s icons as authoritative and select Cancel. |
Next
- Inviting a user — adding someone new, and pre-assigning their role.
- Invitations — who has not accepted yet.
- Managing roles — what a role actually permits.