Purpose Statement
This article explains how to manage existing user accounts within the First Due platform, including editing user information, forcing password resets, managing user sessions, deactivating accounts, and performing bulk actions. These administrative functions help maintain security, manage access, and efficiently handle multiple user accounts simultaneously.
Background Information
User account management is a critical administrative function that ensures proper access control and security within your First Due system. Administrators can perform various actions on user accounts including editing profiles, forcing password changes for security compliance, managing active sessions, and deactivating accounts when personnel leave the department. The bulk action feature allows efficient management of multiple users simultaneously, which is particularly useful during personnel changes or security updates.
Required Permissions
Users - Read - Required to view user accounts and their basic information
Users - Update - Needed to modify existing user account details, settings, and configurations
Users - Create - Essential for adding new user accounts to the system
Users - Force User Logout - Administrative capability to forcibly log out users when needed
Users - Update user status - Allows changing user account status (active, inactive, suspended, etc.
Video
Step-by-Step Guide
Accessing User Management
- Navigate to Admin Users from the main menu
- The user list will display showing all existing users in your system
Individual User Actions
- Locate the user you want to manage in the user list
- Click on the three vertical dots (⋮) next to the user's name
- A dropdown menu will appear with the following action options:
Editing User Information
- Select Edit from the dropdown menu
- Make necessary changes to the user's profile information
- Save your changes
Deactivating User Accounts
- Select Deactivate from the dropdown menu
- The system will display a confirmation message explaining that the user will no longer be able to access First Due
- Click Confirm to proceed with deactivation
Force Password Reset
- Select Force Password Reset from the dropdown menu
- A confirmation popup will appear
- Click Confirm to require the user to create a new password on their next login
Force User Logout
- Select Force User Log-out from the dropdown menu
- A confirmation dialog will appear asking you to verify the action
- Click Confirm to immediately terminate the user's active sessions
Bulk User Management
- Select the checkboxes next to multiple users you want to manage
- Click on Bulk Actions button that appears at the top of the user list
- Choose from the available bulk options:
- Change Roles: Update user roles for selected accounts
- Add Role: Add additional roles to selected accounts
- Update Notification Method: Update the selected accounts notification methods
- Force Password Resets: Require all selected users to reset their passwords
- Send Password Invitation: Sends a Password Invitation to selected users
- Activate: Re-activate a user to allow access into the system
- Deactivate: Deactivate a user to prevent access into the system
Best Practices
Security Management:
- Regularly review user accounts and deactivate those no longer needed
- Use force password resets when security policies require password updates
- Force logout users when suspicious activity is detected
Account Maintenance:
- Deactivate accounts immediately when personnel leave the department
- Use bulk actions for efficiency when managing multiple users
- Keep user information current through regular profile updates
Documentation:
- Document the reason for deactivating accounts for audit purposes
- Maintain records of when bulk password resets are performed
- Coordinate with IT policies regarding user account lifecycle management
Troubleshooting & FAQs
Q: What happens when I deactivate a user?
A: The user immediately loses access to First Due and cannot log in. Their data remains in the system, but the account becomes inactive.
Q: Can I reactivate a deactivated user account?
A: Yes.
Q: What's the difference between Force Logout and Deactivate?
A: Force Logout terminates current sessions but allows the user to log back in. Deactivating prevents all future login attempts.
Q: Why can't I delete users through the interface?
A: User deletion requires support intervention to ensure data integrity and maintain audit trails for compliance purposes.
Q: How long does a forced password reset last?
A: The user must reset their password on their next login attempt. The old password becomes invalid immediately.
Q: Can I undo a bulk action?
A: Some bulk actions like role changes can be reversed, but password resets cannot be undone.