# Users

1. [Home](https://www.agilicus.com/)
2. [Agilicus AnyX Administrative Web Interface](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/)
3. [Access](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/)
4. Users

![](https://www.agilicus.com/www/c980a114-featured-anyx-admin-accessusers.png)## Users

[CONTACT](/contact-us/)

The **Users** page (route `/user-admin`) lists every person who can sign in to your organisation, shows their status and multi-factor authentication state, and is where you create, edit, disable, and delete user accounts.

![Users overview](https://www.agilicus.com/www/b9651966-users-overview.png)    ## Purpose

A user is a person authenticated against an external identity provider whom you may grant permissions within the Agilicus system. The Users page is the master list of those identities: it shows each user's status (active, disabled, or pending), whether they have enrolled a multi-factor authentication method, which groups they belong to, and the labels attached to them. You create users here, edit their profile details, manage group membership, set an automatic end date, and revoke sessions.

## Why use it

- Onboard people: create a user account when a person needs access to any resource.
- See at a glance who is active, who is disabled, and who has not yet enrolled multi-factor authentication.
- Manage group membership and labels so that permissions apply consistently (see [Policies and permissions](/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/policies-and-permissions/)).
- Control lifecycle: disable an account, set an automatic end date, reset a user's identity, or revoke all of a user's sessions after a suspected compromise.
- Move automatically created users to manually created ones, or import users in bulk from a CSV file.

## When to use it

- During initial setup, to add the people who will use the platform (see [Getting started: identify users](/anyx-guide/agilicus-anyx-administrative-web-interface/getting-started/identify-users/)).
- Whenever someone joins, leaves, or changes roles.
- After a security event, to disable an account, reset multi-factor authentication preferences, or revoke sessions.
- When an identity provider creates users automatically and you need to review or adjust them.

**Prerequisite**: permission to administer users (an owner or administrator role). Without it, the page shows a *no permissions* message.

## How to use it

1. Open **Access > Users** from the left navigation.
2. Review the table. Each row is a user, with status, multi-factor authentication indicator, email, name, description, external identifier, group memberships, and labels.

![Users overview](https://www.agilicus.com/www/b9651966-users-overview.png)    ### Creating a user

1. Select **ADD USER**. A new empty row appears at the top of the table.

![New user row](https://www.agilicus.com/www/6c0d6ef7-users-add-row.png)    1. Type the user's **Email** (the only required field), then optionally the **First Name**, **Last Name**, **Description**, and **External Id**.
2. Click outside the row, or press Enter to move to the next field, to save. The row is validated and the user is created asynchronously; the table reloads with the new user. A user whose email matches no identity provider entry appears as *pending* until they first sign in.

### Editing a user

The first name, last name, description, and external id cells are directly editable in the table. Click a cell, change the value, and blur to save. The **email** is set when the user is created and cannot be changed afterwards from the table; to change the email of an existing user, use the **Update User Identity** action, which records the change in the identity provider. Group membership is managed with the **Configure Member of** action or by typing into the **Member of** chips column.

### Managing a single user

Select the **more** menu (three vertical dots) at the end of a user's row to open the row actions:

- **Update User Identity** opens the user identity dialog (see [Dialogs and popups](#dialogs-and-popups)).
- **Update User End Date** opens the end date dialog.
- **Reset User Multi-factor Authentication Preferences** clears the user's enrolled second-factor methods.
- **Configure Member of** opens the advanced group membership configuration.

![User identity dialog](https://www.agilicus.com/www/6c0d6ef7-users-identity-dialog.png)    ![User end date dialog](https://www.agilicus.com/www/6c0d6ef7-users-end-date-dialog.png)    ### Bulk operations

Tick the checkbox on one or more rows, then use the toolbar buttons:

- **DELETE USERS** removes the selected accounts.
- **ENABLE USERS** and **DISABLE USERS** change account status.
- **RESET MFA PREFERENCES** clears multi-factor authentication enrollment for the selected users.
- **MOVE TO MANUALLY CREATED USERS** converts automatically created accounts to manually managed ones.
- **REVOKE SESSIONS** ends the selected users' active sessions.
- **UPLOAD USERS** and **DOWNLOAD USERS** import and export users as CSV files.

### Searching and filtering

- Use the **Search the table** box to find a user by email or name.
- The filter menu (filter icon) provides checkboxes such as **User Status** with *Hide pending users* and *Hide disabled users* options, and multi-factor authentication status options. Changes to filters reload the table.

## Fields and controls reference

| Control | Purpose | Required | Default | Valid values | Notes |
|---|---|---|---|---|---|
| Status | Icon showing the account state | Read-only | n/a | Active, disabled, or pending | A *person* icon indicates a regular active user |
| MFA (column header) | Whether the user has enrolled a multi-factor authentication method | Read-only | n/a | Verified or not | The column header uses the short form "MFA" as shown in the interface |
| Email | The user's identity, used for sign-in | Yes | n/a | An email address, up to 100 characters | Unique per user; cannot be edited once the user exists |
| First Name | The user's given name | No | n/a | Any text |  |
| Last Name | The user's surname | No | n/a | Any text |  |
| Description | Free-form note about the user | No | n/a | Any text |  |
| External Id | The identifier from an upstream identity provider | No | n/a | Any text | Useful when synchronising with an identity provider |
| Member of | The groups the user belongs to | No | n/a | One or more groups | Typing in the chips column offers matching groups |
| ADD USER | Adds a new editable row | n/a | n/a | n/a | The row is saved when it passes validation |
| DELETE USERS | Deletes the selected users | n/a | n/a | n/a | Bulk action on ticked rows |
| ENABLE USERS | Enables the selected users | n/a | n/a | n/a | Bulk action |
| DISABLE USERS | Disables the selected users | n/a | n/a | n/a | Disabled users cannot sign in |
| RESET MFA PREFERENCES | Clears multi-factor authentication enrollment | n/a | n/a | n/a | The user re-enrols at next sign-in; the button label uses the short form "MFA" as shown in the interface |
| REVOKE SESSIONS | Ends active sessions | n/a | n/a | n/a | Useful after a compromise |
| MOVE TO MANUALLY CREATED USERS | Converts automatically created accounts to manually managed ones | n/a | n/a | n/a | For accounts that came from an identity provider and are now managed by hand |
| UPLOAD USERS | Imports users from a CSV file | n/a | n/a | CSV | See the download format for the expected columns |
| DOWNLOAD USERS | Exports the current list as CSV | n/a | n/a | n/a |  |

## Dialogs and popups

- **User identity dialog**: opened from **Update User Identity**. It warns that changing the identifying information resets the user's identity and their multi-factor authentication preferences, then asks for the new identity value (the email address used to identify the user). Select **SAVE** to apply, **CANCEL** to abort.
- **User end date dialog**: opened from **Update User End Date**. It configures a user to be automatically disabled at a chosen point in time. Pick the end time from the date picker and select **SAVE**.
- **Confirmation dialogs**: bulk actions such as **DELETE USERS** and **REVOKE SESSIONS** confirm before acting.

## Configuration versus diagnostics versus confirmation

- **Configuration**: creating and editing users, managing group membership and labels, setting end dates, and changing status.
- **Diagnostics**: the status and multi-factor authentication indicators are informational; detailed per-user diagnostics live on the [Audits](/anyx-guide/agilicus-anyx-administrative-web-interface/access/audits/) page.
- **Confirmation**: deleting a user is permanent. Resetting multi-factor authentication preferences or revoking sessions immediately affects the user's ability to sign in, so confirm the selected users before applying.

## Pagination and async behaviour

- The table pages at **25 rows per page**. The paginator shows the current page; use the page controls to move between pages. The search box filters the full list.
- User changes apply asynchronously. After creating, editing, or deleting a user, wait a few seconds, then reload or navigate away and back to confirm. Group and permission changes propagate in the same way.

## Troubleshooting

- **The user cannot sign in**: check the account status is not disabled and the email is correct. If the user was created before the identity provider entry existed, they remain pending until the provider authenticates them.
- **Multi-factor authentication is missing**: confirm the user has enrolled a method and that methods are enabled in the [authentication policy](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/authentication-policy/). Use **RESET MFA PREFERENCES** only when the user must re-enrol.
- **A user should not have access anymore**: use **DISABLE USERS**, set an end date, or **REVOKE SESSIONS** to end active sessions immediately.
- **The row will not save**: the email field is required and must be unique in the organisation. Check for a validation notification at the bottom of the screen.

## See also

- [Policies and permissions](/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/policies-and-permissions/)
- [Identity and authentication](/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/identity-and-authentication/)
- [Groups](/anyx-guide/agilicus-anyx-administrative-web-interface/access/groups/)
- [Service accounts](/anyx-guide/agilicus-anyx-administrative-web-interface/access/service-accounts/)
- [Audits](/anyx-guide/agilicus-anyx-administrative-web-interface/access/audits/)
- [Authentication policy](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/authentication-policy/)
- [Getting started: identify users](/anyx-guide/agilicus-anyx-administrative-web-interface/getting-started/identify-users/)
- [Labels](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/labels/)

## Web guide

- [Users](https://www.agilicus.com/product-guide/users)
- [Add a user to my org](https://www.agilicus.com/add-a-user-to-my-org)
- [Administrative users](https://www.agilicus.com/product-guide/administraive-users)