Skip to main content

Users

The Users page manages users and departments, invitations, joining and seat requests, account status, and seat assignment.

The Users page manages users and departments, invitations, joining and seat requests, account status, and seat assignment. An existing account, an active account, and an assigned seat are separate conditions. Check each one when a user cannot use the enterprise service.

Confirm how users are maintained

Open Users → Users and select Organization. When User sync is enabled, manual user creation, invitations, new-user imports, and deletion are disabled across the organization. Import updates remains available.
  • For a user managed by the currently enabled source, the source owns the name, email, account, phone number, external user ID, and employee number. Department and status are locked only when mapped.
  • Users belonging to other sources can be edited according to your permissions.
Admin console: select a department and review its users.

Find and edit a user

The department tree and user list scroll separately. Search, action controls, table headers, and pagination remain visible. Use the horizontal scrollbar at the bottom of the list for columns on the right. Enter a page number and press Enter or move focus away; zero opens the first page and a number above the total opens the last page. Changing departments, filters, or pages returns the list to the top. Closing the editor preserves your browsing position. The console has a minimum width of 1280 pixels. In a narrower window, use the horizontal scrollbar at the bottom of the page. A short window may also require vertical page scrolling.
  1. Search for a user or department, or expand the tree and select a department.
  2. Check the account, email, phone, employee number, or external user ID. Use the QID in the editor or exported file when necessary to confirm the user.
  3. Click Edit and check the current management source. An enabled source locks the six identity fields above; mapped department and status fields are also locked. A disabled source, a user no longer managed by that source, or removal of the department or status mapping restores editing of the affected fields. Users without a source are maintained under ordinary permissions.
  4. Save, search again, and check the name, departments, and changed values. A user may belong to several departments; inspect the complete set.

Add users manually or by import

Add a user

  1. Confirm User sync is disabled. Select the department and click Add user.
  2. Enter a name and at least one of account, email, phone number, or employee number. An external user ID does not satisfy this requirement.
  3. If account-and-password sign-in is enabled, enter both an account and an initial password. Otherwise, a password is optional; entering a password still requires an account.
Account-and-password sign-in uses the account field. To use an email or employee number as the account, explicitly put that value in the account column when importing.
Admin console: enter the new user’s identity information.

Check unique identifiers

FieldUniqueness rule
Account, email, phone, employee numberEach is unique among users that have not been deleted. Inactive users still occupy these values.
External user IDUnique among users that have not been deleted. Sync or SSO may reuse an ID from deleted history, creating a new record and QID.
A duplicate value causes the whole operation for that user to fail. In a batch, all related rows using the same non-empty unique value fail.

Import new users or update users

  1. Choose Import users for new users or Import updates for existing users.
  2. Download the current template, fill it in, and upload it. Updates identify existing users by QID, rather than their name, employee number, or external user ID.
  3. When changing departments, provide the complete set to retain. Omitting a department may remove that membership.
  4. Review the import result, correct failed rows, and resubmit. An uploaded file does not mean every row succeeded.
Use the department's More actions menu to add, edit, or delete departments. Read the impact described in the confirmation before deleting.

Invite users

  1. Confirm User sync is disabled, choose a department, and click Invite users.
  2. Choose the default department, enable its invitation, and confirm. Copy the invitation link or download its QR code for the invited users. Check the displayed expiry. Users must verify an identity email in a trusted domain.
  3. In Invitation records, search by department or initiator, check expiry, and open the details to review application results.
  4. In Invitation approvals, verify the applicant and invitation source before deciding.
DecisionResult
Approve and assign a seatAdds the user and assigns a seat; a free seat is required
Approve onlyAdds the user; assign a seat separately afterward
RejectRejects the application; enter a reason if requested

Assign, reclaim, and approve seats

Find the user in Organization. Assign a seat to an unassigned user or click Reclaim for an assigned user. For a batch, select the users and use the batch action. Reclaiming a seat affects access to enterprise services, so check the users first. Enable seat requests in Seat approvals if users without seats should be able to apply from the post-sign-in prompt. Review the reason, account status, and remaining seats before approving and assigning, or rejecting. Status tabs show processed requests.

Deactivate or delete users

The user's More menu provides the available account actions. An inactive user cannot sign in. If status is mapped from the enabled sync source, change it at the source. Deletion is logical: the previous record and history remain, while directly held seats, credentials, and sessions are reclaimed. The user cannot continue signing in and disappears from the list. Account, email, phone, and employee number values are released for reuse. The list shows users that have not been deleted, without a deleted-user filter or detail entry. While User sync is enabled, deletion is controlled by the source. Disable sync before a manual deletion. Deletion does not restore the previous QID or profile later. If sync receives the same external user ID again, it creates a new user and QID from the current source data and applies new-user seat rules. Previous history remains. Identity values already held by another current user cause that sync item to fail; correct the source data or mapping and sync again. SSO recreation also requires automatic user creation to be enabled and the returned identity values to be conflict-free. See Users / User sync / User sync overview and Users / Authentication / Authentication overview.

Set an auxiliary identifier

Choose and save the auxiliary identification field in Advanced settings to change the identifier shown beside names. This setting helps administrators recognize users and does not change sign-in methods. Phone and employee number uniqueness is checked when saved. If historical duplicates exist, confirm each user by QID and correct the records in the ordinary editor or sync source. Users are not merged automatically.

Verify access

Ask the user to sign in through the enterprise entry and confirm an active account and assigned seat. Complete first-sign-in password creation if prompted. If sign-in still fails, record the time and user identifier, then check Audit / User activity. Return to: Users / Users overview.