User Management

Open Users from the main navigation (Admin only). The User Management page controls local accounts, roles, CSV import/export, and per-user notification preferences.

For SSO and directory role mapping, see Security. User create, role change, password reset, and API token actions are recorded in the audit log. For Hub-pushed identity lock, see Fleet governance.

Page overview

Header stats:

Total Users: accounts on this appliance (or Hub master list in Hub mode).
Active Now: users with login activity in the last hour.

Toolbar:

Control	Behavior
Search	Filter by username, email, or role.
Import	Bulk-create users from CSV (Username, Password, Role, Email).
Export	Download current user list as CSV.
Add User	Create a single account via dialog.

Table columns: Username, Email, Role, Created, Last Login, Provider (local vs SSO), and row actions (reset password, delete, open drawer).

Roles

Role	Permissions	Use Case
Administrator	Full system control: global settings, user management, license activation, and audit log.	IT Manager / Owner
Standard User	Operational access: device names, location management, and alert acknowledgment.	Network Technician
Viewer	Read-only access: dashboard monitoring and report generation.	Management / Auditor
Alert Only	Notification access: receives email/webhook triggers (no dashboard access).	Emergency Contact

UI role names map to API values: Administrator → Admin, Standard User → Standard, Viewer → Viewer, Alert Only → AlertOnly.

Alert Only accounts receive email/webhook notifications without dashboard login. Create with email (password optional). Ideal for on-call contacts and integrators who should not change settings.

Add User dialog

Field	Notes
Username	Required for all roles.
Password	Required for Admin, Standard, Viewer. Optional for Alert Only.
Email	Required for Alert Only; optional for others (used for alert delivery).
Role	Admin, Standard, Viewer, or Notification Only (Alert Only).

CSV import format

Header row: Username,Password,Role,Email

Example row: jdoe,P@ssword123,Standard,jdoe@example.com

Download the sample CSV from the import flow. Failed rows are counted in the completion snackbar; successful rows appear immediately in the table.

Valid roles: Admin, Standard, Viewer, AlertOnly.

User drawer (per-user alerts)

Click a user row to open the drawer.

CHANNEL DELIVERY STATUS

Toggle EMAIL and WEBHOOK delivery independently.

EMAIL PREFERENCES

Alert Email: override destination; blank uses the account email.

WEBHOOK PREFERENCES

Selected Webhooks: multi-select from webhooks configured under Settings → ALERTS. Pair with webhook Alert Scope (Global vs Targeted).

ALERT SCOPE & TRIGGERS

Control	Behavior
Alert Scope: All Network Events	User receives triggers for any device (subject to webhook scope).
Alert Scope: Only Devices I Manage	Filters to devices where this user is the assigned manager.
DEVICE DOWN / UP / NEW DISCOVERY chips	Per-event opt-in. Click to toggle active triggers.

Save changes from the drawer footer. Preferences apply when SMTP or webhooks fire for that user.

Federation & identity governance

Enrolled Node (governed)

When Sync Core User Registry is enabled from the Hub, the Node shows:

GLOBAL IDENTITY GOVERNANCE ACTIVE: local user create/delete/password reset and per-user alert edits are locked. Manage accounts on the Hub Users page instead.

Central Hub

CENTRAL IDENTITY COMMAND ACTIVE (HUB MODE): this Hub is the source of truth for fleet user accounts. Changes here can sync to Nodes with governance enabled.

When user sync is first enabled, the Node may upload existing local users to the Hub (except the built-in emergency admin account). Plan Hub admins before locking remote sites.

Security: RBAC & SSO
Integrations: SMTP & webhooks
Fleet governance
Data governance: snapshots before bulk user changes

Hub & fleet

Site identity