Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
Column

A tenant admin uses the Manage Users page to add new users, delete users, edit the properties of existing users and download/upload a csv file containing user data. Click the Manage Users link to display the  user list. To the right of each user name are icons described below.

If you are logged in as the superuser admin you must first click the Manage Tenants link to display the list of tenants. Then click the Image Removedbutton to manage users/roles for the desired tenant. Then click the Manage Users link.

Column
width300px

 On this page:

 

Table of Contents

Add New User

Create new tenant users on the Manage Users page.

Image Removed

Click Image Removedadd new user icon at the top of the user list.

  1. Complete the new user form. 
  2. User names can contain characters, numbers, dot (.), hyphen (-) and the underscore (_) and cannot start with a number. Max length is 50 characters.

  3. Assign roles to the user. NOTE: Assign the special role frevvo.Designer to any user who needs permission to create forms and workflows.
  4. You can assign multiple roles to any user by clicking the "+" icon
  5. Assign a reports to for any user who needs to route a form they fill in to their manager. For example a PTO request.
  6. Submit the form

Image Removed

Add Tenant Admin

You can add additional tenant admins by click the Image Removed icon. This creates a new user with the special permission required to login and manage the tenant. You cannot add this special tenant admin to an existing user. This is the only way to to grant this special tenant admin permission.  

Image Removed

If you want to disable a tenant admin, edit that user by clicking the Image Removedbutton and add the frevvo.ReadOnly role. You can also delete all tenant admin except the initial tenant admin created while creating the tenant. One common case is that you need to remove admin access to a person who initially had that permission via the initial tenant admin. To do this:

  1. Create a new tenant admin
  2. Edit the original tenant admin and add the role frevvo.ReadOnly

Edit Admin Users 

There is also a short-cut to edit the initial tenant admin – click the Image Removedbutton above the alphabet list to go directly to the initial tenant admin's edit page. You can also distinguish the initial tenant admin from non-admins because the initial tenant admin cannot be deleted so it does not have the Image Removed button. If you added additional tenant admins, the user list does not make it readily apparent that a user has that special admin access permission. Currently the way to distinguish an admin is click on each user's Image Removed button and see if the user has the Manage Tenant functions. 

CSV Upload of Users and Roles

customers that have a large number of users with assigned roles, may need to import these (userids/roles) into . provides the ability to perform a bulk import of user data.

Only tenant admins may import user data and associated roles. The upload/download users links are available for tenants using all security managers. This feature is useful when creating/migrating a tenant that uses the LDAP or SAML Security managers.

Image Removed

Section
Column

A tenant admin uses the Manage Users page to add new users, delete users, edit the properties of existing users and download/upload a csv file containing user data. Click the Manage Users link to display the  user list. To the right of each user name are icons described below.

If you are logged in as the superuser admin you must first click the Manage Tenants link to display the list of tenants. Then click the Image Addedbutton to manage users/roles for the desired tenant. Then click the Manage Users link.

Column
width300px

 On this page:

 

Table of Contents

Add New User

Create new tenant users on the Manage Users page.

Image Added

Click Image Addedadd new user icon at the top of the user list.

  1. Complete the new user form. 
  2. User names can contain characters, numbers, dot (.), hyphen (-) and the underscore (_) and cannot start with a number. Max length is 75 characters. Userids that contain single quotes are supported.

  3. Assign roles to the user. NOTE: Assign the special role frevvo.Designer to any user who needs permission to create forms and workflows.
  4. You can assign multiple roles to any user by clicking the "+" icon
  5. Assign a reports to for any user who needs to route a workflow step they fill in to their manager. For example a PTO request.
  6. Submit the form

Image Added

Add Tenant Admin

You can add additional tenant admins by click the Image Added icon. This creates a new user with the special permission required to login and manage the tenant. You cannot add this special tenant admin to an existing user. This is the only way to to grant this special tenant admin permission.  

Image Added

If you want to disable a tenant admin, edit that user by clicking the Image Addedbutton and add the frevvo.ReadOnly role. You can also delete all tenant admin except the initial tenant admin created while creating the tenant. One common case is that you need to remove admin access to a person who initially had that permission via the initial tenant admin. To do this:

  1. Create a new tenant admin
  2. Edit the original tenant admin and add the role frevvo.ReadOnly

Edit Admin Users 

There is also a short-cut to edit the initial tenant admin – click the Image Addedbutton above the alphabet list to go directly to the initial tenant admin's edit page. You can also distinguish the initial tenant admin from non-admins because the initial tenant admin cannot be deleted so it does not have the Image Added button. If you added additional tenant admins, the user list does not make it readily apparent that a user has that special admin access permission. Currently the way to distinguish an admin is click on each user's Image Added button and see if the user has the Manage Tenant functions. 

CSV Upload of Users and Roles

customers that have a large number of users with assigned roles, may need to import these (userids/roles) into . provides the ability to perform a bulk import of user data.

Only tenant admins may import user data and associated roles. The upload/download users links are available for tenants using all security managers. This feature is useful when creating/migrating a tenant that uses the LDAP or SAML Security managers.

Image Added

Once you have more than a few thousand users, we recommend using the API because it is programmatic and can be automated. This is a more resilient way to bulk load lots of users. There is a limit of 150,000 users per upload.

Maximum Number of Users in CSV Upload

If you are not using the API, the maximum number of users that can be validated and uploaded with a csv file is controlled by the context parameter frevvo.userloader.maxUserLoadSize The default value is 10,000 and is configured in the web.xml file in the frevvo war. In-house customers can increase the maximum number by adding a parameter in <frevvo-home>\tomcat\conf\catalina\localhost\frevvo.xml. Refer to Configuring Batch Size for CSV Uploads for the details.

Download Users and Roles

  • Make sure you are logged in as the tenant admin. Click the Manage Users link.
  • Click thedownload users csv file icon.
  • This downloads a complete comma separated file that includes the list of the users and their assigned roles in the current tenant. Roles that exist in the tenant but are not assigned to any users will not be included in the file.The fields are comma separated. The following is an example:



...

Field/Column NameDescription
userIdThe unique user id used for login. Required. The maximum length of a user id is 75 characters. Userids that contain single quotes are supported.
tenantThe tenant identifier is optional. If not supplied, it defaults to the current tenant. Attempts to upload users for another tenant shows a validation error.
passwordFor newly inserted users, the plain text password. Always blank on download. Default passwords should be provided especially if you are using a tenant configured with the SAML Security Manager. If you are using the Default Security Manager, users can then be instructed to change the password on first login using the Manage Personal Information option.
firstNameUser's first name.
lastNameUser's last name.
emailUser's email address. Required
enabledSet to 'true' to enable the user
reportsToThe userId of the user that the user reports to, if any.
rolesA list of the user's roles, separated by the '|' character. Roles are inserted as necessary. Spaces are not allowed in role names. Role names cannot contain more than 100 characters.
transactionEither blank or 'DELETE'. If DELETE then the user will be removed. Otherwise, the user is updated if it exists or inserted as necessary.
Info
  • To include a ',' (comma) in a field, escape it with a leading '\' character. To include a '|' (bar) in a role name, escape it with a leading '\' char.
  • To delete a user, enter DELETE into the transaction column of the file for that user. The user id and tenant fields are required for successful deletion. The message "Attempting to delete non-existing userId. It will be ignored." displays if the user id does not exist.
  • To delete all roles for a user, leave the roles column blank. See Updating Users and Roles using a CSV file for more information.

...

  • Although csv files can be opened in other programs, they are best viewed through some kind of spreadsheet program. Here is the file when it is opened with Excel:

    Notice the password column is blank.

...

You will see this message with the number of roles and users that were created: "Users Loaded successfully. 3 Added, 1 Updated, 0 Deleted, 4 Roles Added." Uploading an empty users file displays the message "Users file is empty".

...

Tip
  • If you leave the roles column blank in the csv file you are using for updates, the existing roles for that user will be deleted. Be sure to add the roles relevant to the users you are updating so the existing roles are not cleared.
  • The warning messages "Update of user failed"  or "Users Loaded successfully with some issues. See detailed results for details." is no longer displayed if users in the csv file you are uploading do not have any roles assigned to them. 

...