# Users

- Link: https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/users/
- Published: 2026-08-24T01:47:14+00:00
- Author: Don Bowman

1. [Home](https://www.agilicus.com/)
 2. [Agilicus AnyX Administrative Web Interface](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/)
 3. [Access](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/)
 4. Users

![c980a114-featured-anyx-admin-accessusers](https://www.agilicus.com/www/c980a114-
featured-anyx-admin-accessusers.png)

## Users

[CONTACT](https://www.agilicus.com/contact-us/)

The **Users** page (route `/user-admin`) lists every person who can sign in to your
organisation, shows their status and multi-factor authentication state, and is where
you create, edit, disable, and delete user accounts.

![Users overview](https://www.agilicus.com/www/b9651966-users-overview.png)

## Purpose

A user is a person authenticated against an external identity provider whom you 
may grant permissions within the Agilicus system. The Users page is the master list
of those identities: it shows each user’s status (active, disabled, or pending),
whether they have enrolled a multi-factor authentication method, which groups they
belong to, and the labels attached to them. You create users here, edit their profile
details, manage group membership, set an automatic end date, and revoke sessions.

## Why use it

 * Onboard people: create a user account when a person needs access to any resource.
 * See at a glance who is active, who is disabled, and who has not yet enrolled 
   multi-factor authentication.
 * Manage group membership and labels so that permissions apply consistently (see
   [Policies and permissions](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/policies-and-permissions/)).
 * Control lifecycle: disable an account, set an automatic end date, reset a user’s
   identity, or revoke all of a user’s sessions after a suspected compromise.
 * Move automatically created users to manually created ones, or import users in
   bulk from a CSV file.

## When to use it

 * During initial setup, to add the people who will use the platform (see [Getting started: identify users](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/getting-started/identify-users/)).
 * Whenever someone joins, leaves, or changes roles.
 * After a security event, to disable an account, reset multi-factor authentication
   preferences, or revoke sessions.
 * When an identity provider creates users automatically and you need to review 
   or adjust them.

**Prerequisite**: permission to administer users (an owner or administrator role).
Without it, the page shows a _no permissions_ message.

## How to use it

 1. Open **Access > Users** from the left navigation.
 2. Review the table. Each row is a user, with status, multi-factor authentication 
    indicator, email, name, description, external identifier, group memberships, and
    labels.

![Users overview](https://www.agilicus.com/www/b9651966-users-overview.png)

### Creating a user

 1. Select **ADD USER**. A new empty row appears at the top of the table.

![New user row](https://www.agilicus.com/www/6c0d6ef7-users-add-row.png)

 1. Type the user’s **Email** (the only required field), then optionally the **First
    Name**, **Last Name**, **Description**, and **External Id**.
 2. Click outside the row, or press Enter to move to the next field, to save. The row
    is validated and the user is created asynchronously; the table reloads with the
    new user. A user whose email matches no identity provider entry appears as _pending_
    until they first sign in.

### Editing a user

The first name, last name, description, and external id cells are directly editable
in the table. Click a cell, change the value, and blur to save. The **email** is
set when the user is created and cannot be changed afterwards from the table; to
change the email of an existing user, use the **Update User Identity** action, which
records the change in the identity provider. Group membership is managed with the**
Configure Member of** action or by typing into the **Member of** chips column.

### Managing a single user

Select the **more** menu (three vertical dots) at the end of a user’s row to open
the row actions:

 * **Update User Identity** opens the user identity dialog (see [Dialogs and popups](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/users/#dialogs-and-popups)).
 * **Update User End Date** opens the end date dialog.
 * **Reset User Multi-factor Authentication Preferences** clears the user’s enrolled
   second-factor methods.
 * **Configure Member of** opens the advanced group membership configuration.

![User identity dialog](https://www.agilicus.com/www/6c0d6ef7-users-identity-dialog.
png)

![User end date dialog](https://www.agilicus.com/www/6c0d6ef7-users-end-date-dialog.
png)

### Bulk operations

Tick the checkbox on one or more rows, then use the toolbar buttons:

 * **DELETE USERS** removes the selected accounts.
 * **ENABLE USERS** and **DISABLE USERS** change account status.
 * **RESET MFA PREFERENCES** clears multi-factor authentication enrollment for the
   selected users.
 * **MOVE TO MANUALLY CREATED USERS** converts automatically created accounts to
   manually managed ones.
 * **REVOKE SESSIONS** ends the selected users’ active sessions.
 * **UPLOAD USERS** and **DOWNLOAD USERS** import and export users as CSV files.

### Searching and filtering

 * Use the **Search the table** box to find a user by email or name.
 * The filter menu (filter icon) provides checkboxes such as **User Status** with
   _Hide pending users_ and _Hide disabled users_ options, and multi-factor authentication
   status options. Changes to filters reload the table.

## Fields and controls reference

| Control | Purpose | Required | Default | Valid values | Notes | 
| Status | Icon showing the account state | Read-only | n/a | Active, disabled, or pending | A _person_ icon indicates a regular active user | 
| MFA (column header) | Whether the user has enrolled a multi-factor authentication method | Read-only | n/a | Verified or not | The column header uses the short form “MFA” as shown in the interface | 
| Email | The user’s identity, used for sign-in | Yes | n/a | An email address, up to 100 characters | Unique per user; cannot be edited once the user exists | 
| First Name | The user’s given name | No | n/a | Any text |  | 
| Last Name | The user’s surname | No | n/a | Any text |  | 
| Description | Free-form note about the user | No | n/a | Any text |  | 
| External Id | The identifier from an upstream identity provider | No | n/a | Any text | Useful when synchronising with an identity provider | 
| Member of | The groups the user belongs to | No | n/a | One or more groups | Typing in the chips column offers matching groups | 
| ADD USER | Adds a new editable row | n/a | n/a | n/a | The row is saved when it passes validation | 
| DELETE USERS | Deletes the selected users | n/a | n/a | n/a | Bulk action on ticked rows | 
| ENABLE USERS | Enables the selected users | n/a | n/a | n/a | Bulk action | 
| DISABLE USERS | Disables the selected users | n/a | n/a | n/a | Disabled users cannot sign in | 
| RESET MFA PREFERENCES | Clears multi-factor authentication enrollment | n/a | n/a | n/a | The user re-enrols at next sign-in; the button label uses the short form “MFA” as shown in the interface | 
| REVOKE SESSIONS | Ends active sessions | n/a | n/a | n/a | Useful after a compromise | 
| MOVE TO MANUALLY CREATED USERS | Converts automatically created accounts to manually managed ones | n/a | n/a | n/a | For accounts that came from an identity provider and are now managed by hand | 
| UPLOAD USERS | Imports users from a CSV file | n/a | n/a | CSV | See the download format for the expected columns | 
| DOWNLOAD USERS | Exports the current list as CSV | n/a | n/a | n/a |  |

## Dialogs and popups

 * **User identity dialog**: opened from **Update User Identity**. It warns that
   changing the identifying information resets the user’s identity and their multi-
   factor authentication preferences, then asks for the new identity value (the 
   email address used to identify the user). Select **SAVE** to apply, **CANCEL**
   to abort.
 * **User end date dialog**: opened from **Update User End Date**. It configures
   a user to be automatically disabled at a chosen point in time. Pick the end time
   from the date picker and select **SAVE**.
 * **Confirmation dialogs**: bulk actions such as **DELETE USERS** and **REVOKE 
   SESSIONS** confirm before acting.

## Configuration versus diagnostics versus confirmation

 * **Configuration**: creating and editing users, managing group membership and 
   labels, setting end dates, and changing status.
 * **Diagnostics**: the status and multi-factor authentication indicators are informational;
   detailed per-user diagnostics live on the [Audits](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/audits/)
   page.
 * **Confirmation**: deleting a user is permanent. Resetting multi-factor authentication
   preferences or revoking sessions immediately affects the user’s ability to sign
   in, so confirm the selected users before applying.

## Pagination and async behaviour

 * The table pages at **25 rows per page**. The paginator shows the current page;
   use the page controls to move between pages. The search box filters the full 
   list.
 * User changes apply asynchronously. After creating, editing, or deleting a user,
   wait a few seconds, then reload or navigate away and back to confirm. Group and
   permission changes propagate in the same way.

## Troubleshooting

 * **The user cannot sign in**: check the account status is not disabled and the
   email is correct. If the user was created before the identity provider entry 
   existed, they remain pending until the provider authenticates them.
 * **Multi-factor authentication is missing**: confirm the user has enrolled a method
   and that methods are enabled in the [authentication policy](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/authentication-policy/).
   Use **RESET MFA PREFERENCES** only when the user must re-enrol.
 * **A user should not have access anymore**: use **DISABLE USERS**, set an end 
   date, or **REVOKE SESSIONS** to end active sessions immediately.
 * **The row will not save**: the email field is required and must be unique in 
   the organisation. Check for a validation notification at the bottom of the screen.

## See also

 * [Policies and permissions](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/policies-and-permissions/)
 * [Identity and authentication](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/identity-and-authentication/)
 * [Groups](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/groups/)
 * [Service accounts](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/service-accounts/)
 * [Audits](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/audits/)
 * [Authentication policy](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/authentication-policy/)
 * [Getting started: identify users](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/getting-started/identify-users/)
 * [Labels](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/labels/)

## Web guide

 * [Users](https://www.agilicus.com/product-guide/users)
 * [Add a user to my org](https://www.agilicus.com/add-a-user-to-my-org)
 * [Administrative users](https://www.agilicus.com/product-guide/administraive-users)