A tenant admin uses the Manage Users page to add new users, delete users, and edit the properties of existing users. Click the Manage Users link to display the user list. To the right of each user name are icons described below.
If you are logged in as the superuser admin you must first click the Manage Tenants link to display the list of tenants. Then click the button to manage users/roles for the desired tenant. Then click the Manage Users link.
On this page:
Add New User
Create new tenant users on the Manage Users page.
Click at the top of the user list to add a new user.
- Complete the new user form
- Assign roles to the user. NOTE: Assign the special role frevvo.designer to any user who needs permission to create forms and workflows.
- You can assign multiple roles to any user by clicking the "+" icon
- Assign a reports too for any user who needs to route a form they fill to their manager. For example a PTO request.
- Submit the form
Add Tenant Admin
You can add additional tenant admins by click the icon. This creates a new user with the special permission required to login and manage the tenant. You cannot add this special tenant admin to an existing user. This is the only way to to grant this special tenant admin permission.
If you want to disable a tenant admin, edit that user by clicking the button and add the frevvo.ReadOnly role. You can also delete all tenant admin except the initial tenant admin created while creating the tenant. One common case is that you need to remove admin access to a person who initially had that permission via the initial tenant admin. To do this:
- Create a new tenant admin
- Edit the original tenant admin and add the role frevvo.ReadOnly
View User List
Click on a capital letter (A to Z) to display a list of users whose name begins with that letter. Click All to display all current users.
- Click at the top of the user list to add a new user.
- Click at the top of the user list to add a new tenant admin user.
- Click to display that user's home page.
- Click to edit that user's management functions.
- Click to upload a signature image file that will be applied to all forms this user signs in place of his or her first and last name. See Digital Signatures for details.
- Click to log into as that user.
- Click to edit a user's profile including password, e-mail address, max upload attachment size, disable the user.
- Click to remove a user from the server.
If you use LDAP or a delegating or custom security manager to define your users and their roles or groups, you do not see the New User icon on the Manage Users page.
You should not assign any roles (such as Manager, Supervisor, etc.) to a tenant admin user, as this can adversely affect the execution of tasks and activities in work flows. A tenant admin with roles may be accidentally assigned a task actually intended for other non-admin users who have the same role, and the tenant admin could perform the task and thereby disrupt or compromise the work flow or its data.
Adding Superusers
The superuser admin can add new superusers to the special d (default tenant). New Users added to the default tenat automatically become new superusers. This allows you to name additional superusers and then if you want you can disable the built-in superuser named "admin". To disable the build-it superuser named "admin" click the button above the alpabet list. This brings you directly to the build-in superuser admin's edit page, or you can click the icon to the right of the admin name in the user list. Set the Enabled dropdown to false. This will prevent further logins by the built-in superuser named "admin". Note you cannot delete the built-in superuser named "admin". You can however delete any additional admin user you have created.
Disable Users
The superuser or tenant admin can disable a user. Disabling a user prevents that user from logging into the form server. If the user was had the role frevvo.designer (aka. was a designer user) the users' forms will become inaccessible to other users. Even if the forms were public users will get the error "This resource belongs to a disabled user". To disable a designer user but keep the form accessible, change the user's role from frevvo.designer to frevvo.readonly and set the Enabled dropdown back to true. In this case when the user tries to login they will get the error "Login is currently disabled".
To disable a user click the icon to the right of the user's name in the user list. Set the Enabled dropdown to false. If this user is already logged into the form server they will be able to continue using the form server until they logout. At that point future logins will be blocked with the error "Your account is disabled".