Users

In iRis Cloud, a User is a principal entity with credentials to authenticate and access the platform. Users are governed by an access control model that defines what operations they can perform and which platform resources they may access.

---

Each user belongs to a specific Tenant or a Customer owner.
Ownership determines the scope of data and resources available to the user.

iRis Cloud uses a fixed role hierarchy:

• Tenant administrator has full control over a specific tenant environment. This role owns and manages its iRis Cloud entities (dashboards, HMI Devices, assets, etc.) and can create and manage Customers, their Customer Users, and their access to Tenant resources.
• Customer User has read-only access to the resources and data explicitly assigned by the Tenant Administrator.

---

You must be logged in as a Tenant administrator with sufficient privileges to manage users.

Procedure

1. Navigate to Customers and open Manage customer users for the required Customer.
2. Click + Add user in the top right corner.
3. Complete the user form:
   • Email: used as the login username;
   • First name, Last name, Phone (Optional);
   • Language and Unit system (Optional);
   • Set usage period (Optional):
     • If not set: There is no restriction on the usage period.
     • If set: The account can only be used from the specified start date to the end date.
4. Select the activation method:
   • Display activation link - generates an activation link for manual sharing;
   • Send activation email - sends the activation link to the user automatically.
5. Click Add to create the user.

After creation, the user must activate the account using the provided link and set a password before logging in.

---

After receiving the activation link, the user must complete the account setup process.

1. Open the activation link.
2. Enter and confirm a password.
3. Click Create password.

Once the password is created, the activation process is complete. The user can log in and access platform resources according to the assigned ownership and permissions.

---

The User details panel shows all properties of a user account and allows you to edit them.

1. Navigate to Customers and open Manage customer users for the required Customer.
2. Click the row of the required user in the list.

The panel contains the following fields:

• Email (required): The user’s login credential and unique identifier on the platform.
• First name: The user’s given name, shown in the UI and notifications.
• Last name: The user’s family name, shown in the UI and notifications.
• Phone: Contact number in E.164 format like +12015550123. Use the flag selector to set the country code prefix.
• Description: Free-text field for notes about the user.
• Default dashboard: The dashboard opened automatically after login. Enable Always fullscreen to hide the toolbar and open the dashboard in fullscreen mode.
• Home dashboard: The dashboard opened when the user clicks Home in the navigation bar. Enable Hide home dashboard toolbar to hide the toolbar on this dashboard.

To save changes, click the checkmark icon at the top of the panel.

---

Administrators can temporarily assume a user’s session.
This feature is useful for verifying access rights and troubleshooting permission-related issues.

1. Open the customer users list.
2. In the users list, click the Login as icon next to the required user.
3. The platform opens a new session with the selected user’s permission scope.

iRis Cloud allows administrators to temporarily restrict a user’s access without deleting the account. When a user account is disabled, the user cannot log in or access any tenant resources.

1. Open the customer users list and select the required user.
2. In the user details view, click Enable/Disable User Account to change the account status.

Users with sufficient permissions can remove a user account from the platform.

1. Open the customer users list.
2. Click the Delete (trash bin) icon next to the required user.
3. Confirm the deletion in the dialog window.

---

Assign users only to the customer resources they need.

Review user access regularly to minimize unnecessary access.

Configure outgoing mail server settings to support automated activation workflows.