Users

The Users screen is where managers add users, give them permissions on projects, and control their access to Cellosign.

To open it, click Users in the left menu. The screen is available to project managers and organization managers.

In this section:

• Roles and permissions: what each role can do.
• Service users: users for API integrations.
• Password and access control: temporary passwords, blocking users, lockout and password rules.
• User profile: what each user can manage in their own account.

The users list

The list shows the users you manage:

• Organization managers see the users who have a role in any project of the organization, and the organization’s managers.
• Project managers see the users who have a role in the selected project.

Column	What it shows
Username	The user name used to sign in.
First Name / Last Name	The user’s name.
Permissions	The user’s roles, for example “Project manager project” or “Agent project”.
Last Login	When the user last signed in. The list is ordered by this column, most recent first.
Status	An icon. Hover over it to see the status: “The user is active”, “The user is blocked”, “The user is blocked, too many failed login attempts” or “The user is blocked, need to change the password”. Service users have a robot icon.

To find users, enter part of a user name, first name, last name or email address in the search box, or select a project, and click Search. You can show 25, 50 or 100 users per page.

Click a user to open the user’s page.

To download the list of users, click Export. The file UsersList.csv contains each user’s username, first name, last name, email and project roles.

Add a user

1. Click Add User.
2. Under User details, fill in:

Field	What it’s for
Username	Required. The name the user signs in with. It must be unique and can contain letters, digits and @ . + - _, with no spaces. It is case-sensitive, and it can’t be changed later. We recommend using the user’s email address.
First Name	Required.
Last Name	Optional.
Mobile	Optional.
Email	The address for the welcome email and temporary passwords. If you leave it empty and the username is an email address, the username is used.

3. Under Permissions, give the user at least one role (see below). A new user starts with the Agent role on the current project.
4. Click Save.

Cellosign creates a temporary password and sends the user a welcome email with the address of Cellosign, the username and the temporary password. The user must change the password at the first login.

Users of projects where SSO is enforced don’t get a password or a welcome email; they sign in through your identity provider. See SSO.

Permissions

A user’s permissions are their roles. Each role is given either on a project or on the whole organization. For what each role can do, see Roles and permissions.

To give a role:

1. Under Permissions, select the organization, the project and the role: Agent, Implementer, Project manager or Organization manager. Organization manager applies to the whole organization, so it doesn’t need a project.
2. Click Add.

The role is added to the table (Organization, Project, Role). To remove a role, click Delete Permission in its row.

• A user can have one role per project. Different projects can have different roles.
• A user must have at least one role.
• Project managers can give roles only in the projects they manage.

Groups

If user groups are enabled for your organization, the user’s page has a Groups section. Groups are defined for the organization and give their members extra permissions. Select a group and click Add, or click Remove From Group to take the user out of a group.

Edit a user

Click the user in the list, change the details or permissions, and click Update User. The username can’t be changed.

The user’s page also shows the user’s Last Login and Joined date, and a message when the user is blocked, must change the password, or is managed by an external authentication system (SSO or LDAP). For users managed by an external system, the details provided by that system can’t be changed in Cellosign.

There is no option to delete a user. To stop a user’s access, block the user. See Password and access control.