AI assistants: this page is available as Markdown at https://documentation.cluedin.net/administer/users-and-roles/user-management.md. The index of the whole documentation, with instructions for AI assistants, is at https://documentation.cluedin.net/llms.txt.

User management

how-to Steps to accomplish one task

On this page

1. Add user
   1. Add user by email address
   2. Add user via SSO
2. Deactivate user
3. Generate a password for a service account
   1. Verify the result
   2. What this changes
   3. If something goes wrong
4. User management reference

In this article, you will learn how to add and deactivate users in your CluedIn organization.

This article is intended for users with the OrganizationAdmin role or users with the following claim access level.

Section	Claim	Access level
Admin	Users	At least Consulted

A user is someone who can sign in to CluedIn. The user’s access to CluedIn modules and features is defined by the user’s roles. For more information, see Roles.

You can perform the following actions to manage users:

• Add user
• Deactivate user
• Generate a password for a service account

Add user

Users can be added to CluedIn in one of the following ways:

• By the user’s email address
• Via Azure Active Directory single sign-on (SSO)

Add user by email address

If you don’t have Azure Active Directory SSO enabled for CluedIn, you can add users to the platform by their email addresses.

The following diagram shows the flow of adding users to CluedIn.

To add a user by email address

1. On the navigation pane, go to Administration > User Management.

2. On the actions pane, select Users. Then, select Invite User.

3. On the Invite User pane, enter the user’s email address. Then, in the lower-right corner, select Invite.

   The user will receive an email with a link to activate their account. After the user follows the link and creates a password, you will see the user on the All users page.

   

   By default, the user’s role is OrganizationUser. It means that the user can view all sections and modules in a read-only mode. To give the user access to more features within the platform, add another role to the user.

Add user via SSO

If you have Azure Active Directory SSO enabled for CluedIn, the users will be able to sign in using SSO. For more information, see Configure SSO.

Because the users are part of your SSO domain, they do not need an invite. They can log in directly using their organization credentials. Use invites only for CluedIn non-SSO users.

Deactivate user

If you want to prevent the user from signing in to CluedIn, deactivate the user.

For SSO users, you can revoke user access in Azure Active Directory. For users added to CluedIn by their email address, you can deactivate them in CluedIn.

The following diagram shows the flow of deactivating a user in CluedIn.

To deactivate a user in CluedIn

1. On the navigation pane, go to Administration > User Management.

2. On the actions pane, select Users.

3. On the All users page, find the user whom you want to deactivate.

4. In the Active column, turn off the status toggle.

   Alternatively, you can deactivate the user from the user details page. To do that, select the user and on the Settings tab, turn off the status toggle.

   The status of the user is changed to Blocked.

   

   The user won’t be able to sign in to CluedIn.

Generate a password for a service account

A user who signs in to CluedIn via SSO has no local password, because their identity provider authenticates them instead. Some automation tools, such as a Product Deployment Toolkit, need a username and password to authenticate with CluedIn directly. To give such a tool its own credentials, mark the SSO user it runs as a service account, then generate a local password for it.

This action requires a higher access level than the rest of this article: at least Accountable on the Admin > Users claim, not just Consulted.

To generate a password for a service account

1. On the navigation pane, go to Administration > User Management.

2. On the All users page, select the SSO user you want to use as a service account.

3. On the user’s details page, select the Settings tab.

4. Turn on the Service Account toggle.

   

5. Select Generate Password.

6. In the confirmation dialog, select Generate Password again to confirm.

   The new password is shown once, with a button to copy it to your clipboard. Copy it now: once you close the dialog, CluedIn does not show the password again, and there is no way to retrieve it later.

7. Select Continue to close the dialog.

Verify the result

The service account can sign in with its username and the copied password, in addition to signing in via SSO unless SSO is otherwise disabled for that user.

What this changes

Generating a password replaces any local password the user already had. Anything that was using the previous password — including a password generated earlier for the same service account — stops working immediately. Turning the Service Account toggle off again does not remove the local password; it only changes whether Generate Password is available for that user.

If something goes wrong

Generate Password is disabled. The user is not marked as a service account yet. Turn on the Service Account toggle first.

User management reference

Whenever a new user is added to CluedIn or changes are made to the user details page, they are recorded and can be found on the Audit Log tab. These actions include the following:

• Create a user
• Add a user to a role
• Remove a user from a role
• Activate a user
• Deactivate a user
• Delete user invite
• Complete registration
• Mark user as service account
• Unmark user as service account
• Generate password for user