Users

The Users page (route /user-admin) lists every person who can sign in to your organisation, shows their status and multi-factor authentication state, and is where you create, edit, disable, and delete user accounts.

Purpose

A user is a person authenticated against an external identity provider whom you may grant permissions within the Agilicus system. The Users page is the master list of those identities: it shows each user’s status (active, disabled, or pending), whether they have enrolled a multi-factor authentication method, which groups they belong to, and the labels attached to them. You create users here, edit their profile details, manage group membership, set an automatic end date, and revoke sessions.

Why use it

Onboard people: create a user account when a person needs access to any resource.
See at a glance who is active, who is disabled, and who has not yet enrolled multi-factor authentication.
Manage group membership and labels so that permissions apply consistently (see Policies and permissions).
Control lifecycle: disable an account, set an automatic end date, reset a user’s identity, or revoke all of a user’s sessions after a suspected compromise.
Move automatically created users to manually created ones, or import users in bulk from a CSV file.

When to use it

During initial setup, to add the people who will use the platform (see Getting started: identify users).
Whenever someone joins, leaves, or changes roles.
After a security event, to disable an account, reset multi-factor authentication preferences, or revoke sessions.
When an identity provider creates users automatically and you need to review or adjust them.

Prerequisite: permission to administer users (an owner or administrator role). Without it, the page shows a no permissions message.

How to use it

Open Access > Users from the left navigation.
Review the table. Each row is a user, with status, multi-factor authentication indicator, email, name, description, external identifier, group memberships, and labels.

Creating a user

Select ADD USER. A new empty row appears at the top of the table.

Type the user’s Email (the only required field), then optionally the First Name, Last Name, Description, and External Id.
Click outside the row, or press Enter to move to the next field, to save. The row is validated and the user is created asynchronously; the table reloads with the new user. A user whose email matches no identity provider entry appears as pending until they first sign in.

Editing a user

The first name, last name, description, and external id cells are directly editable in the table. Click a cell, change the value, and blur to save. The email is set when the user is created and cannot be changed afterwards from the table; to change the email of an existing user, use the Update User Identity action, which records the change in the identity provider. Group membership is managed with the Configure Member of action or by typing into the Member of chips column.

Managing a single user

Select the more menu (three vertical dots) at the end of a user’s row to open the row actions:

Update User Identity opens the user identity dialog (see Dialogs and popups).
Update User End Date opens the end date dialog.
Reset User Multi-factor Authentication Preferences clears the user’s enrolled second-factor methods.
Configure Member of opens the advanced group membership configuration.

Bulk operations

Tick the checkbox on one or more rows, then use the toolbar buttons:

DELETE USERS removes the selected accounts.
ENABLE USERS and DISABLE USERS change account status.
RESET MFA PREFERENCES clears multi-factor authentication enrollment for the selected users.
MOVE TO MANUALLY CREATED USERS converts automatically created accounts to manually managed ones.
REVOKE SESSIONS ends the selected users’ active sessions.
UPLOAD USERS and DOWNLOAD USERS import and export users as CSV files.

Searching and filtering

Use the Search the table box to find a user by email or name.
The filter menu (filter icon) provides checkboxes such as User Status with Hide pending users and Hide disabled users options, and multi-factor authentication status options. Changes to filters reload the table.

Fields and controls reference

Control	Purpose	Required	Default	Valid values	Notes
Status	Icon showing the account state	Read-only	n/a	Active, disabled, or pending	A person icon indicates a regular active user
MFA (column header)	Whether the user has enrolled a multi-factor authentication method	Read-only	n/a	Verified or not	The column header uses the short form “MFA” as shown in the interface
Email	The user’s identity, used for sign-in	Yes	n/a	An email address, up to 100 characters	Unique per user; cannot be edited once the user exists
First Name	The user’s given name	No	n/a	Any text
Last Name	The user’s surname	No	n/a	Any text
Description	Free-form note about the user	No	n/a	Any text
External Id	The identifier from an upstream identity provider	No	n/a	Any text	Useful when synchronising with an identity provider
Member of	The groups the user belongs to	No	n/a	One or more groups	Typing in the chips column offers matching groups
ADD USER	Adds a new editable row	n/a	n/a	n/a	The row is saved when it passes validation
DELETE USERS	Deletes the selected users	n/a	n/a	n/a	Bulk action on ticked rows
ENABLE USERS	Enables the selected users	n/a	n/a	n/a	Bulk action
DISABLE USERS	Disables the selected users	n/a	n/a	n/a	Disabled users cannot sign in
RESET MFA PREFERENCES	Clears multi-factor authentication enrollment	n/a	n/a	n/a	The user re-enrols at next sign-in; the button label uses the short form “MFA” as shown in the interface
REVOKE SESSIONS	Ends active sessions	n/a	n/a	n/a	Useful after a compromise
MOVE TO MANUALLY CREATED USERS	Converts automatically created accounts to manually managed ones	n/a	n/a	n/a	For accounts that came from an identity provider and are now managed by hand
UPLOAD USERS	Imports users from a CSV file	n/a	n/a	CSV	See the download format for the expected columns
DOWNLOAD USERS	Exports the current list as CSV	n/a	n/a	n/a

Dialogs and popups

User identity dialog: opened from Update User Identity. It warns that changing the identifying information resets the user’s identity and their multi-factor authentication preferences, then asks for the new identity value (the email address used to identify the user). Select SAVE to apply, CANCEL to abort.
User end date dialog: opened from Update User End Date. It configures a user to be automatically disabled at a chosen point in time. Pick the end time from the date picker and select SAVE.
Confirmation dialogs: bulk actions such as DELETE USERS and REVOKE SESSIONS confirm before acting.

Configuration versus diagnostics versus confirmation

Configuration: creating and editing users, managing group membership and labels, setting end dates, and changing status.
Diagnostics: the status and multi-factor authentication indicators are informational; detailed per-user diagnostics live on the Audits page.
Confirmation: deleting a user is permanent. Resetting multi-factor authentication preferences or revoking sessions immediately affects the user’s ability to sign in, so confirm the selected users before applying.

Pagination and async behaviour

The table pages at 25 rows per page. The paginator shows the current page; use the page controls to move between pages. The search box filters the full list.
User changes apply asynchronously. After creating, editing, or deleting a user, wait a few seconds, then reload or navigate away and back to confirm. Group and permission changes propagate in the same way.

Troubleshooting

The user cannot sign in: check the account status is not disabled and the email is correct. If the user was created before the identity provider entry existed, they remain pending until the provider authenticates them.
Multi-factor authentication is missing: confirm the user has enrolled a method and that methods are enabled in the authentication policy. Use RESET MFA PREFERENCES only when the user must re-enrol.
A user should not have access anymore: use DISABLE USERS, set an end date, or REVOKE SESSIONS to end active sessions immediately.
The row will not save: the email field is required and must be unique in the organisation. Check for a validation notification at the bottom of the screen.