Users and roles

Add people to your organization, choose what each person can do, and remove them.

Everyone who works in your organization is a user with a role. You add people and change their organization role in Organization SettingsSuper Users. What they can do inside each prefix is set separately, per prefix: see Give people access to a prefix.

Roles

RoleWhat it allows
READView only.
MODIFYView and update existing items. Can't create or delete.
EXECUTEView and run actions, such as start and stop. Can't change data.
MANAGEFull control: create, view, update, delete and run actions. Excludes super-administrator functions.
SUPEREverything in MANAGE, plus administration.

Roles apply at two levels:

  • Organization role: set on the Super Users screen. It covers organization-wide settings such as users and prefixes.
  • Prefix role: set on the Prefix Users screen, for each prefix. It covers the services in that prefix.

A person can have a different role in each prefix. For example, Priya can be SUPER in "Singapore services" and READ in "Canada developer machines": she runs everything in Singapore and can only look at the Canadian machines.

Give the smallest role that does the job

Start people on READ or EXECUTE and raise the role when they need more. Keep SUPER for the few people who administer the organization.

On some service screens, buttons you can't use are greyed out with a hint such as Needs MANAGE role on this prefix.

Add a user

  1. Open Organization SettingsSuper Users.
  2. Click Add User.
  3. Type the person's email in Invite User.
  4. Click Add.

The person appears in the list. Then:

  1. Change their role if they need a different organization role.
  2. Attach them to a prefix. Until you do, they see the setup checklist instead of machines, databases and the other services.

Change a user's role

  1. Find the person in the list and click ActionChange Role.
  2. Pick the role in Select Role.
  3. Click Change.

The Role column shows the new role. This changes the organization role only. To change what someone can do in a prefix, see Give people access to a prefix.

Remove a user

  1. Find the person and click ActionRemove.
  2. Check the email in the Warning! box.
  3. Click Remove.

The person is removed from the list and can no longer open your organization.

Good to know

  • Your own row has no Action menu: you can't change your own role or remove yourself. Ask another administrator.
  • Use the search box above the list to find people.
  • One person can belong to several organizations. They choose one each time they sign in.

Troubleshooting

  • "unauthorized" Your role doesn't allow managing users, or the email was rejected. Check the address, or ask someone with SUPER.
  • A new user only sees the setup checklist. No prefix is attached to them yet. See Give people access to a prefix.