User Management

Next Identity console has the concept of Access Levels, defining roles, organizational scopes, and environment permissions for users upon creation. In essence:

• Role: Specifies user permissions and capabilities. More details can be found in the Roles page.

• Level: Determines the organizational scope of the role, with options including Company, Organization, Property, and Client. More details can be found in the Levels section.

• Environment: Specifies accessible environments (e.g., Development, Test, Production) tailored to each customer's needs.

📘

Access Level:

• A dynamic combination of role, hierarchical level, and environment for nuanced user permissions.
• Access Level: Role + Level + Environment

👍

Multiple Access Levels

Users can be assigned multiple access levels, offering versatile control over their interaction with different parts of the system.

Levels

Users can be assigned to different organizational scopes, each granting varying privileges. Higher levels confer greater privileges, necessitating careful assignment.

• Company: Highest level, encompassing the entire customer account.
• Organization: Subdivision within the customer.
• Property: Groups of clients managed collectively.
• Client: Individual applications, offering the most granular access.

Practical Examples

Platform Views

In addition to Access Levels, the Next Identity console introduces the concept of Platform Views. Platform Views are designed to provide users with the best experience based on the activities they will perform within the Next Identity platform. These views help tailor the interface and available tools to the user's role and responsibilities.

There are two available Platform Views:

• Service Management View: This view is ideal for users who are part of a cross-application CIAM team. These users manage security policies and overall CIAM strategies across many applications. The Service Management View provides them with the necessary tools to perform these tasks effectively.
• Application Management View: This view is designed for users who manage a specific application. It provides an individualized view of that application's configurations, allowing users to connect it to the CIAM service, customize User Hosted Journeys, and manage security settings.

Each of these views comes with its own set of roles, offering granular control over what actions users can perform within the platform. More details about the roles specific to each Platform View can be found in the Roles page.

Platform Views can be selected during user creation and edited later if necessary, ensuring the console interface aligns with the user's role and responsibilities.

📘

Application Management View & Environment Access

Access to the Application Management View includes access to all environments within that view. It is not possible to restrict permissions to only specific environments, such as limiting access to lower environments only.

Managing Users

To manage users within the Next Identity console, ensure your Role includes CRUD permissions for the User entity.

Upon having this permission, you'll notice an engine icon in the top-right corner of the screen. Clicking this icon redirects you to the User List within the Manage Users feature.

User List

Upon accessing the Manage Users feature, the initial screen displayed is the User List. Here, you can effortlessly view, search, and filter users, enhancing your efficiency in user management.

You'll only see users within the same organizational level and company as yours.

Roles list

In the Manage Users feature, you can also find the Roles tab, which presents a list of all existing roles. It includes the number of users associated with each role, details about the permissions for each role, and the features within the product.

Add a new user

To add a new user, click on the "New User" button. This process consists of five steps:

1. Step 1: Provide the user's full name, email address and select the platform view (Service management or Application management).

   

   

2. Step 2: Choose one of the available predefined roles. These roles will vary depending on the platform view selected in the previous step. The information about the selected role will be displayed on the right side of the screen to help you make an informed decision.

   

3. Step 3: Select the access level for the user.

   

4. Step 4: Choose the environments the user will have access to.

   

5. Step 5: Review the summary of your choices. You can edit the data you have input and the choices you have made. Additionally, you can add another role, as the Next Identity console allows users to be assigned multiple roles and access levels, providing versatile control over their interaction with different parts of the system.

   

By following these steps, you can successfully add a new user to the system.

Edit a user

To edit a user, locate the user in the Users list. Once you have found the user, click the edit button (pencil icon) in the Actions column. Follow the on-screen instructions, which are very similar to the steps for adding a new user.

Delete a user

To delete a user, locate the user in the Users list. Once you have found the user, click the delete button (trash icon) in the Actions column. Follow the on-screen instructions to complete the deletion process.

📘

User Management Advisory

If you need assistance to invite a user or manage roles, please contact your Next Identity consultant.