Administration Guide

How to Manage Users

This guide shows you how to invite users to your site, assign their role, and activate or deactivate their accounts.

User records in AlloyScan are scoped to a single site. Each user has a role (Administrator or User), an active/inactive state, and an email address that doubles as their sign-in identifier.

Prerequisites

  • You have the Administrator role on the site.
  • You have the user's full name and email address.
  • The site has not reached its Max Users quota. You can check the quota at Admin Center > Site Settings > Limits and usage.
  • If the user will sign in via SSO, the corresponding identity provider is already configured. See How to Set Up Microsoft SSO and How to Set Up Google SSO.

Invite a new user

  1. Navigate to Admin Center > Site Settings > IAM > Users.

    Note: Open this page from the left sidebar rather than by typing the URL directly. Direct navigation can occasionally return a "Not Found" page. 2. Click + New user. 3. Fill in the user form: - Full name — the display name that appears in the grid and in audit logs. - Email — must be a valid, unique email address. The same address is used for sign-in and for password-setup or notification emails. - Role — select Administrator or User. See Roles and Permissions Reference for the capability split. - Active — leave on so the user can sign in immediately. 4. Click Save.

The new user receives a password-setup email and can sign in once they complete it. If your site signs in via SSO only, the user signs in with their provider account on first visit.

Change a user's role

  1. Navigate to Admin Center > Site Settings > IAM > Users.
  2. Click the user's Full name in the grid to open the edit form.
  3. Change the Role dropdown to Administrator or User.
  4. Click Save. The role change takes effect on the user's next page load. Existing sessions may need to sign out and back in to pick up role-based menu changes.

Deactivate or reactivate a user

A deactivated account cannot sign in even with a correct password and even via SSO.

  1. Navigate to Admin Center > Site Settings > IAM > Users.
  2. Click the user's Full name in the grid.
  3. Toggle Active off to deactivate, or on to reactivate.
  4. Click Save. Deactivation does not delete the user record or their historical attribution in change logs.

Verify

After saving, verify the change in the Users grid:

  • The new or updated user appears with the expected Role and Active value.
  • The Last sign-in column updates the next time the user signs in.
  • For a new user, ask them to confirm they received the password-setup email.

You can also confirm successful sign-ins on Admin Center > Site Settings > Logs > Security log.