👥 Manage users, groups, and invitations

The Identity and Access Management section lets you administer access at the company level.

It centralizes:

• users
• groups
• applications
• ID Tags (Whitelist)
• invitations

---

📍 Access

From the relevant company:

1. Open Configuration
2. Go to Users
3. Use the available tabs depending on the desired action

---

👤 Managing users

The Users tab lets you create a user and associate them with one or more groups.

Creating a user

To add a new user:

1. Open the Users tab
2. Click on Add user
3. Fill in the user attributes
4. Click on Next
5. Select the groups to associate
6. Click on Submit

Available attributes

During creation, you can fill in:

• First name
• Last name
• Email
• Phone number

You can also enable the option:

• MFA (2FA) required to login: two-factor authentication via an app such as Google Authenticator

info

We recommend enabling MFA for administrator accounts.

Associating groups

At the next step, select one or more groups to define the user's permissions.

Groups determine the level of access within the company.

---

👥 Managing groups

The Groups tab lets you view existing groups and create new ones.

From the group list, you can:

• search for a group
• view the available groups
• click on Add group to add a new group to the company

Viewing a group

By opening a group, you access its detailed information:

• its name
• its description
• its member users
• its member groups
• the groups it belongs to

Adding a group to a group

From a group's detail page, you can click on Add group to attach this group to other groups.

Adding a user to a group

From the group detail page, click on Add User to quickly assign a user to this group.

---

✉️ Managing invitations

The Invitations tab lets you invite an external user to join the company.

Creating an invitation

To send an invitation:

1. Open the Invitations tab
2. Click on Create invitation
3. Fill in the recipient's email address
4. Choose the entity type
5. Choose the role to assign
6. Click on Submit

Invitation settings

An invitation lets you define:

• Invited user's email
• Entity to invite: the user or their whole Company
• Role assignment:
  • If Entity = User, it is the external User's role in the Company
  • If Entity = Company, it is the highest possible role for Users in the Company

Example:

• Jack is an administrator of "Company A"
• A user of "Company B" shares access with Jack from the "Invitations" page by selecting Entity = Company and Role = Operator
• Jack will have an Operator role in "Company B" and Administrator in "Company A"
• Jack creates a user with the "Read Only" role in "Company A"; that user will automatically also receive "Read Only" access to "Company B"

Tracking invitations

The invitation list lets you view:

• the name
• the status
• the requester
• the recipient
• the entity type
• the company or site concerned
• the expiration date

An invitation can for example be in the state:

• Accepted
• Pending
• Declined

info

It is possible to delete an invitation from the list. This deletes the invitation but does not remove groups shared between Companies if the invitation has already been accepted by the user.

Copying the invitation link

From the list, you can display and copy the link associated with an invitation. This allows sharing the invitation if the invitation email was not received by the user or was deleted.

Receiving the invitation

The recipient receives an email containing the main invitation information and a button to access the console.

Accepting or declining an invitation

From the invitation page, the user can:

• review the access details
• check the assigned roles
• accept the invitation
• decline the invitation

---

🧩 Managing applications

The Applications tab lets you administer the applications linked to the company.

From this tab, you can:

• view existing applications
• see their Client ID
• identify the associated groups
• click on Add application to create a new application

---

🏷️ Managing ID Tags (Whitelist)

The ID Tags (Whitelist) tab lets you manage the identifiers authorized for the company.

In particular, you can:

• view existing records
• search for an identifier
• launch a synchronization
• import multiple records
• add a new record

---

✅ Result

Centralized management of users, groups, and invitations allows you to:

• secure company access
• structure permissions by role
• simplify access administration
• track invitations sent to externals
• keep a clear and maintainable organization

---