Skip to main content

User Management

From Admin → Users (Users — write permission), an administrator can:

  • Create, edit and deactivate accounts — deleting a user deactivates it (active = no), it never physically removes its data.
  • Set the username, email, password (reset) and assigned group. The group is the only carrier of rights: there is no longer any role or profile to assign directly to an account.
  • Reset the two-factor authentication of an account that lost both its phone and its backup codes.
  • A welcome email is sent automatically on creation if an email address is provided and email sending is configured (see Email Configuration).

Inviting users by email​

The + Invite a user button saves you from choosing a password on someone's behalf: they receive a link and create their own account.

  • Enter addresses one at a time (Enter key), paste several at once, or import an Excel file (.xlsx): every address it contains joins the list, whatever its column or sheet. Nothing is sent until you click Send invitations, so you can review and remove addresses first. A single sending holds 500 addresses at most.
  • Each link is valid for 7 days and works only once. The invitee chooses a username and password there, then signs in normally (two-factor authentication applies if the organization requires it).
  • The account is created in the Vérification document group. To grant other rights, change its group afterwards with Edit. As with an account created by hand, it still has to be attached to a team: without one, it sees no pipeline.
  • An address that already has an account in the organization is not invited: the summary shown after sending reports it.
  • Once registration is complete, the invitee receives a welcome email with their username and their organization's address. The email warns them that their interface stays limited until an administrator assigns them to a team or, if needed, grants them other rights.

Invitations not yet accepted appear below the user list, under Pending invitations:

  • Resend sends a new link, valid for 7 days, and cancels the previous one. Inviting an address again from the dialog does the same.
  • Revoke cancels the invitation, for example after a typo in the address.

An unanswered invitation is deleted by the organization's retention purge, if a retention period is configured.

Inviting requires email sending to be configured (see Email Configuration) and the application URL to be set. Otherwise sending is refused with an error message, and no invitation is recorded.

What this screen doesn't handle​

  • A user's team is managed from the team management page (Teams — write permission), not from Admin → Users.
  • The rights themselves are not set account by account: they come from the group, composed under Groups and Profiles.
  • A user's daily token quota exists and is enforced at analysis time, but no interface currently lets you set it — only a direct database change can.

Self-service​

Each user manages, from their own Profile page (account menu):

  • Their password (except for an account connected via Azure AD SSO, where the password is managed in the organization's Azure AD portal).
  • Their interface language (FR/EN).
  • Their notification preference for job-completion emails.
  • Their two-factor authentication (enabling, backup codes, disabling).
  • The light/dark theme of the interface — this is a browser preference, it is not stored on the account and therefore does not follow the user from one device to another.