Introduction

This document is designed to help administrators efficiently manage user access and permissions within the PayNet Single Sign-On (SSO) system. Whether you're adding new users, updating existing accounts, or managing user access by enabling or disabling accounts, this guide provides step-by-step instructions to ensure smooth user management. In addition, you'll learn how to invite new users to the platform and configure group permissions to control access to various resources. By following this guide, you'll be able to effectively navigate the tools needed to maintain a secure and organized user environment.

User Management

User Management is located at the top right corner of your screen, where the administrator will have access to the following sections: People, Groups, New Joiners, and Invitees.

People

1. Search for a user

Use the search bar to quickly locate any existing user within your organization.

You can search by email address, first name, last name, or user status (active or inactive).

2. Add a user

To add a user, go to People section and click +Add Users. Enter the user's email address and click Proceed. This will send an email invitation to the provided address.

After adding a user, their status will appear under Invitees.

You can invite up to 50 new users at once.

3. Disable and Enable a user

Administrators can deactivate or reactivate user access. To deactivate a user, toggle the Status button to Inactive if they no longer need access. To reactivate, simply switch the status back to Active.

Users cannot be deleted, but you can set their status to Inactive to revoke access.

4. Update a user

Administrators can update a user's profile with the following action:

- Edit the user's first and last name

- Add or remove assigned groups

- Remove SMS OTP setup

- Remove the Authentication App setup

- Initiate a password reset

To make updates, simply search for the user using the search bar and click on their name.

IMPORTANT: If you remove a user's SMS OTP (mobile number) or Authenticator App, they will no longer be able to use these methods for authentication. The user will be required to use email for authentication instead.

a. First and Last Name

To update a user's first and last name, simply enter the new details and click Save to apply the changes.

b. Password

To initiate a password reset for a user, click Reset and confirm by selecting OK to proceed with resetting their password.

c. Assign or Remove a group access

To assign a user to a group, click Assign Group. This will display a list of available groups and roles in the PayNet portal. Select the appropriate group to assign. To remove a group, simply uncheck the option. Once you're done, exit the page by clicking the X in the upper right corner.

As an Administrator, you can assign users to specific groups with roles such as Manager, Member, or Read-Only, depending on their needs. You can contact PayNet customer support to request a User Access Matrix guide that will help you determine the right level of access for each user, ensuring they have the permissions needed for their role.

Manager: This role typically has full access to manage settings, perform actions, and assign roles to other users. 
Member: A user with the Member role generally has access to perform specific tasks within the module but without the ability to manage settings, users, or configurations. They can usually create, update, or interact with data, but can't change administrative settings. ReadOnly: A user with the ReadOnly role can view information or data within the module but cannot make any changes, create new entries, or modify existing ones. They have "view-only" access.

Groups

1. Search a group

Administrators can search for specific groups using the search bar as shown below. Clicking on any of the listed group access roles allows you to view the users who are assigned to that specific access level.

2. View users in a group

Administrators can view all users assigned to a specific group role. To remove a user from a group, click the X next to their name. To add users to a group, click + Assign People.

New Joiners

1. Approve or Revoke

Under New Joiners, you'll find a list of users who signed up independently, without an invitation. From this view, you can approve or revoke their access as needed.

You should only approve individuals who are meant to be on your list. If someone does not belong, please revoke their access.

Invitees

1. Search for an invitee

Under Invitees, you'll find a list of individuals who were invited and haven't completed signing up via the PayNet portal. You can search for a specific invitee by their email address.

This section will display details of each invitee, including their email address, company name, and the date the invitation was sent.