User Management
Overview
%product_name% supports several types of users:
- Local Users
- External Users
- Active Directory Users
- Guest Users
- Global Supervisors
Local users can be created and managed through the graphical user interface by navigating to "Users" → "Local Users." Administrators can create, enable, disable, or delete users at any time.
External Users are accounts intended for clients outside the organization. These users have minimal permissions, such as uploading and downloading files.
Active Directory Users are users imported from your Active Directory server. To enable Active Directory synchronization in %product_name%, please refer to $link[page,383272,auto$].
Guest Users are temporary accounts that any user can create. By default, these accounts expire after one hour, but the expiration time can be adjusted. Note that guest users do not have a username or password—they use only a Guest ID to log in.
Deleting Users
When deleting any type of user, all their owned files are moved to Recycle Bin. User deletion can be performed through the user interface, API, or Active Director Sync.
When attempting to delete a Supervisor, %product_name_short% checks to ensure the user is not a mandatory Supervisor whose deletion would disrupt the Approval Process. In such cases, %product_name_short% will not allow the deletion.
Local Users
Administrators can create local users from the user interface without needing to integrate with an Active Directory server. When creating a local user, it is also possible to assign a role to that user.
Administrators can create new accounts by clicking the "+" button. Passwords must be in line with the system's policy.
Administrators can require new users to change their password upon first login. This feature can also be applied to existing local users during their next login, though active sessions will not be terminated.
When creating a new user, administrators can choose between six user types:
- User - regular account with minimal permissions, such as uploading, downloading and sharing files.
- Administrator - account with elevated permissions to change configuration settings.
- Readonly Administrator - account with view-only access to all the configured settings.
- Helpdesk Administrator - account with access to change global configuration.
- Auditor - account with access to audit logs with file activity.
- Global Supervisor - account with the ability to see and instantly approve all pending requests, eliminating the need for further steps.
Administrators can edit existing local users, including their username, password, email, and role.
External Users
External user accounts are designed for long-term file sharing with partner clients or organizations. This role cannot see internal users and can only share files with their owner.
An external user account can only log into the system if:
- It has not expired
- The external account is enabled
- The parent/creator account is active and enabled
- Trusted network rules are met
Administrators and users can create external user accounts by navigating to "Users" → "External Users" and clicking the "Create external user" button.
Ensure the password meets the system policy requirements, then click "Continue."
External user accounts may require an expiration date, depending on the configured settings. Click "Create" to finalize the new account.
Once created, external user accounts can be edited, enabled/disabled, and deleted.
By clicking the "Edit" button, you can update the account's credentials using the same dialog that was used during account creation.
Active Directory Users
Active Directory users are synchronized from your "Active Directory" server into %product_name% . They can login using the same username and password as their Active Directory credentials. Note that you cannot edit or change information for these users in any way.
Guest Users
A guest account is a temporary account with limited access and lifetime. Any user can create a guest account and share files with it. A guest user can only upload files to themselves or to the account owner who created their guest account.
A guest user account can only log into the system if:
- It has not expired
- The guest user account is enabled
- The parent/creator account is active and enabled
- Trusted network rules are met
To create a guest account, log in and go to "Users" → "Guest."
Click the "Add Guest User" button in order to generate a new guest user.
Add a proper username and email address for the guest user to receive notifications.
Choose the desired expiration date and click "Add User" to finalize the operation. Use this page to perform actions like suspending, editing or deleting a guest account.
Logging in with a Guest Account
To log in with a guest account, instruct your guest user to access the login page and use the generated PIN code (can be found in the e-mail, which was automatically sent to the guest user).
Groups
The "Groups" page lists both "Active Directory" and "Custom groups."
Custom Groups
Custom Groups are user-defined collections created by an administrator, where both Local and Active Directory users can be included as members. Each Custom Group must have a unique identifier (name) and can optionally have a separate display name. Administrators can modify group %core_product_name% Workflow ($link[page,383405,auto$]) and enable Shared Spaces for collaboration within the group.
Active Directory Groups
Active Directory groups are created after an Active Directory Authentication Source is configured. You cannot add new groups, but you can edit attributes such as Display Name or $link[page,383405,auto$].
Limit / Quota for Groups
Administrators can define upload restrictions at the group level. For each Custom or Active Directory group, you may configure:
- Upload Limit – the largest size allowed for a single file.
- Upload Quota – the maximum combined size of all files uploaded by the group.
To set or adjust these limits:
- Navigate to the Groups page.
- Locate the group you want to configure.
- Click the three-dot menu in the group’s row.
- Select the "Set Limit/Quota" action to open the settings modal.
- Enter the desired upload limits and click "Save Changes".
These limits help ensure efficient storage management and prevent groups from exceeding allocated resources.