User Management

User Management lets admins control who has access and what they can do.

Accessing User Management

1. Click Company in the sidebar
2. Select Users
3. View your team members list

Viewing users

The user list shows:

Column	Description
Name	Display name
Email	Login email address
Role	Permission level
Dashboard Groups	Groups the user belongs to
2FA Status	Whether 2FA is enabled
Last Active	Most recent activity

Adding users

Step 1: Click Add User

1. In User Management, click + Add User
2. The new user form opens

Step 2: Enter user details

Field	Description
Email	User’s email (required)
Name	Display name
Role	Permission level (Admin, Staff, Member)
Dashboard Groups	Groups to assign

Step 3: Send invitation

1. Review the info
2. Click Send Invitation
3. User gets an email to set up their account

Invitation process

1. User receives invitation email
2. Clicks link to create password
3. Sets up account
4. Gets access based on assigned role and groups

Editing users

Changing user details

1. Find the user
2. Click Edit (pencil icon)
3. Modify name, role, timezone, dashboard groups, or email digest settings
4. Click Save

Changing user role

1. Edit the user
2. Select new role from dropdown
3. Save changes
4. New permissions apply immediately

Available user roles are Admin, Staff, and Member. External viewers should use ShareLinks instead of a separate guest role.

Managing Dashboard Group membership

1. Edit the user
2. Add or remove group assignments
3. Save changes
4. User sees updated dashboards

Managing email digests (Business+)

Admins on Business or Starship can manage a user’s email digest from the edit screen.

1. Open the user in Company -> Users
2. In Email Digest, turn on Enable email digest
3. Choose Daily or Weekly
4. Choose a send time from Send at
5. Click Save

The digest is sent using the user’s timezone. If the setting has never been changed, the default is disabled, with Daily and 8:00 AM selected when you turn it on.

What the digest includes:

• Audit log activity only
• Create, update, and delete changes
• A summary of what changed and who made the change

If there are no qualifying changes during the period, no digest email is sent.

Configuring user permissions (Professional+)

Admins on Professional, Business, or Starship tiers can configure granular permissions:

1. Edit the user
2. Click Configure Permissions
3. Adjust settings in the permission panel
4. Save changes

Dataset permissions

Dataset permissions are configured at the top of the user edit page.

Control	What it does
Access Mode	Chooses whether the user gets Full Access, a Blacklist, or a Whitelist.
Default Permission Level	Sets the default dataset permission for allowed datasets: Read + Write or Read Only.
Allowed / Blocked Datasets	The dataset picker used when Access Mode is Blacklist or Whitelist.
Per-Dataset Permission Overrides	In Whitelist mode for non-members, lets you override individual datasets to Default, Read, or Read + Write.

Role-specific behavior:

• Admin users always keep full dataset access with read/write permissions. The page shows a summary, but admins do not use custom dataset restrictions.
• Staff users can use all dataset permission controls.
• Member users use dataset permissions only for AI Chat access. They still cannot open the raw Datasets or Modified Datasets pages directly, and their dataset access stays Read Only.

Access modes:

• Full Access: the user can reach every dataset allowed by their role.
• Blacklist: the user can reach every dataset except the selected ones.
• Whitelist: the user can reach only the selected datasets.

Default permission levels:

• Read Only: the user can use the dataset in widgets and downstream features but cannot edit the source dataset.
• Read + Write: the user can use and edit the dataset.

Feature permissions

Feature permissions are the toggle list in the lower half of the user edit page. These toggles control feature access or write actions, depending on the feature. Use Reset to Role Defaults to restore the standard defaults for the selected role.

Toggle	What turning it on does
Dashboards & Widgets	Enables dashboard and widget editing actions. Dashboard visibility still follows Dashboard Groups.
Integrations	Enables adding, editing, and reconnecting standard integrations.
Modified Datasets	Enables creating and editing Modified Datasets.
Dynamic Filter Variables	Enables creating, editing, and deleting dynamic filter variables.
Share Links	Enables creating, editing, duplicating, moving, and deleting dashboard share links.
Resplendent API	Enables managing Resplendent API credentials.
Custom Integrations	Enables creating and editing custom integrations.
Templates	Enables managing dashboard and widget templates in the Template Gallery.
Reports	Enables report blueprint management actions and report-related editing actions.
Widget Snapshots	Enables widget snapshot creation and deletion actions where snapshot tools are available.
Soundboard	Enables uploading and managing threshold alert sounds.
Tags	Enables creating, editing, and deleting tags.
AI Chat Access	Enables access to Eric / AI Chat. For members, this still follows the dataset rules above and remains read-only.
AI Context Updates	Enables submitting AI context updates from supported dataset context prompts.

Important behavior:

• Non-AI feature toggles follow the selected role defaults.
• AI Chat Access defaults on for Admins and Giga Admins, but not for Staff or Members.
• AI Context Updates defaults on for Staff and above.
• Members only get the AI Chat Access toggle.
• AI Chat Access and AI Context Updates appear for all companies.
• Some toggles make a page read-only instead of hiding it completely. Tier limits and role requirements can still block separate actions.

Tip

Permissions take effect immediately. The user may need to refresh their browser to see changes in the UI.

Removing users

Deactivating a user

1. Find the user
2. Click Deactivate
3. User can no longer log in
4. Account can be reactivated later

Deleting a user

1. Find the user
2. Click Delete
3. Confirm
4. Account is permanently removed

Caution

Deleting is permanent. Consider deactivating instead to preserve history.

User status

Status	Description
Active	Can log in and use the system
Invited	Invitation sent, awaiting setup
Deactivated	Account disabled, cannot log in

Resending invitations

If a user didn’t get their invitation:

1. Find the user (status: Invited)
2. Click Resend Invitation
3. New email is sent
4. Previous link is invalidated

Password reset

User-initiated reset

1. Go to sign-in page
2. Click Forgot Password
3. Enter email address
4. Follow email instructions

Admin-initiated reset

1. Find the user
2. Click Reset Password
3. User receives reset email

Two-Factor Authentication

Viewing 2FA status

The user list shows:

• Enabled: 2FA is active
• Disabled: 2FA not set up

Requiring 2FA

Admins can:

• Encourage users to enable 2FA
• Enterprise plans can enforce 2FA

Resetting 2FA

If a user loses their authenticator:

1. Find the user
2. Click Reset 2FA
3. User must set up 2FA again on next login

Bulk operations

Exporting user list

1. Open Company -> Users
2. If needed, use the search box to narrow the list
3. Click Export CSV
4. Download the users.csv file

The export includes the users currently shown by the table. If you filter the list with search first, the CSV contains only those matching rows.

Bulk invitations

For many users:

1. Prepare a CSV with emails and names
2. Use bulk import (contact support)
3. Invitations sent to all

Self-service features

User profile

Users can manage their own:

• Display name
• Password
• 2FA settings
• Email digest preferences

What users cannot change

• Their own role
• Dashboard group assignments
• Account deletion

Troubleshooting

User can’t log in

• Verify email is correct
• Check account isn’t deactivated
• Try password reset
• Verify 2FA code is correct

User can’t see dashboards

• Check dashboard group assignments
• Verify dashboards are in assigned groups
• Confirm role has view permission

Invitation not received

• Check spam/junk folder
• Verify email is correct
• Resend the invitation
• Check email deliverability

2FA issues

• Verify device time is synced
• Try using a recovery code
• Admin can reset 2FA

Related topics

• Roles & Permissions
• Dashboard Groups