Users

Under Platform → Management → Users you manage and monitor everyone registered on the platform. Administrators, and users with the User management permission, can create users, update their information, manage authentication settings, assign roles, configure managed users, inspect authorizations, and review active sessions.

Users overview

The overview lists every user together with their most important account and authentication information.

Search

The search field matches on:

• User ID
• Username
• SSO username
• First name, infix, and last name (separately or combined, e.g. “Firstname Lastname” or “Firstname Infix Lastname”)
• Email address
• Phone number

The overview can only be searched, not sorted or filtered.

Columns

Column	Description
Id	Unique identifier of the user.
Admin	Whether the user has platform administrator rights.
Username	Username used to log into the platform.
SSO username	External username used for Microsoft, Google, or Apple authentication, when it differs from the platform username.
Firstname	User’s first name.
Infix	Optional name infix.
Lastname	User’s last name.
Email	Registered email address.
Phone	Optional phone number.
Biometrics	Whether biometric verification is required in the mobile app.
MFA	Whether Multi-Factor Authentication is enabled.
Disable MFA	Whether the user is allowed to disable MFA themselves.
Disabled	Whether the account has been disabled.
Locked	Whether the account is temporarily locked after multiple failed login attempts.
Add collection	Whether the user is allowed to create new collections.

Creating a user

Select New user to create a new platform user. Users can also be created automatically through a Create User node in a Dataflow.

Context menu

Right-click a user to open the context menu:

• Edit
• Edit password
• Delete
• Variables
• Configure managed users
• Associations
• Tokens

If a user’s account is locked, an Unlock account option also becomes available. Accounts lock automatically for 1 hour after 5 failed login attempts.

Edit user

The Edit user dialog has four tabs.

Personal

Setting	Required	Description
Profile picture	No	The user’s profile picture. Users can upload their own via the web app or mobile app; administrators can remove it.
Username	Yes	Unique username used to log into the platform. Can be changed as long as the new username is unique.
Firstname	Yes	User’s first name.
Infix	No	Optional name infix.
Lastname	Yes	User’s last name.
Email	Yes	User’s email address.

Business

Setting	Required	Description
Phone	No	Contact phone number.
Company	No	Company name.
Department	No	Department within the organization.
Job	No	Job title or role.

Platform settings

Setting	Description
Admin rights	Grants platform administrator permissions.
Multi factor authentication	Requires MFA for this user.
User disabled	Disables the account while keeping all user information.
Biometrics check in app	Requires biometric verification in the mobile app.
Create collections	Allows the user to create new collections.
Allowed to disable MFA	Allows the user to disable MFA themselves. When off, administrators can enforce MFA.

Authorisation

Setting	Description
SSO username	External Microsoft, Google, or Apple username, when it differs from the platform username.
Add role	Assign one or more roles to the user.
Roles	All roles currently assigned. Remove one with the delete icon.

A user can hold multiple roles at the same time.

Other context menu actions

• Edit password: lets an administrator change a user’s password, typically after they’ve forgotten it.
• Delete: removes the user from the platform.
• Variables: opens the user-specific Variables editor, used to personalize app behavior per user.
• Configure managed users: lets administrators set up impersonation, so another employee can temporarily take over an unavailable colleague’s account without sharing passwords. Both individual users and groups can be assigned. Once configured, access is available immediately, and the assigned user can switch accounts via Run as user in the web app or mobile app. Run as user is only visible when the user may impersonate at least one other user.
• Associations: a read-only overview of how the user is authorized in each collection: which collections they can access, which roles they hold there, and the resulting effective permissions across modules, dashboards, forms, agents, dataclips, dataflows, and MCPs. Expanding a permission shows which role granted it. This view is for inspection and troubleshooting only.
• Tokens: a read-only overview of the user’s active sessions, showing login date and time, client type, browser or app, operating system, and version info where available. Administrators can use this for auditing and troubleshooting, but cannot revoke a session from here: users manage and revoke their own sessions from the web app or mobile app.

Permissions

Access to the Users page requires either platform administrator rights or the User management permission.

Tips

• Disable a user account instead of deleting it when someone leaves the organization.
• Enforce MFA by turning off Allowed to disable MFA.
• Use Configure managed users instead of sharing passwords for temporary account access.
• Check the Associations window when troubleshooting authorization issues.
• Check the Tokens window when investigating unexpected logins.