User Management

Users are managed in two places:

Tenant level — creating and deleting users, for tenant admins. Found under User management in the menu top right.
Organisation level — adding users to an organisation and setting their role, for organisation admins. Found on the Users page inside the organisation.

Creating a user

On the tenant User management page, click:

Fill in the email address, name and a first password. The user can change the password after logging in.

Adding a user to an organisation

Add

Open the organisation and go to its Users page. Pick the user with Add user.

Set the roles

Click the user to set:

The organisation role: Viewer, Editor or Organisation admin. What each role can do.
The dashboard role: Viewer or Editor. Without a dashboard role the user does not see dashboards.

Service users

A service user is created with: on the tenant User management page.

A service user is an account for a machine, not a person. It has no password and cannot log in. It is used for direct API access, together with a token. The email address is only an identifier and can be a made-up address.

Give a service user only the User can insert right in the organisations it should write to.

Account security

Every user manages their own security on the My Profile page:

Password — change it any time.
Two-factor authentication (TOTP) — a code from an authenticator app at login. Strongly recommended for admins.
Passkeys — log in with the fingerprint, face or PIN of the device instead of a password.

A tenant admin can reset a user’s password from the user’s detail page, and manage (remove) a user’s TOTP and passkeys when a phone is lost.