Users and permissions
Users manages identities, authentication channels, roles, status, and company access. Create a separate identity for every person and integration so access can be revoked independently and audit records identify the actual actor.
Signing in
A user has a unique code and may also have a unique email address. UI users can sign in with either identifier and their password. API authentication always uses the user code, not the email address.
Access mode controls where the identity can be used:
UI
Browser sign-in only.
API
API authentication only.
UI and API
Both browser and API authentication.
UI passwords require at least 8 characters. Identities with API access require at least 16 characters.
Roles and company access
Admin
Application administration, organization functionality, and all active companies.
Organization user
Organization functionality and all active companies, without administrator-only settings.
Company user
Company functionality for explicitly assigned companies only.
Admin and organization users do not need company assignments. A company user with no assignments has no company available.
Viewing users
The list shows code, display name, email, role, access mode, and status. Search the visible identity fields and filter by role, access mode, or status. Click a row to open it; select rows for Activate, Deactivate, Delete, or Export.
In use
Search or filter by role, access mode, and status. Select rows for Activate, Deactivate, Delete, or Export. Deactivation preserves the identity and its audit history.
Create a new user
Select Add User. Enter a stable code, optional email, display name, initial password, role, access mode, status, and company assignments where required.
Choose UI, API, or UI and API deliberately. UI passwords require at least 8 characters; identities with API access require at least 16. Voyzu sends no email, invitation, or reset message, so supply the password manually through a secure channel.
An email address is an optional UI login identifier, not a recovery mechanism. Voyzu does not send invitations, verification messages, or password-reset links.
Make changes
Open a user to update display name, email, role, access mode, company assignments, or administrator-only options. Use Change Password to set a replacement credential. Changing an email changes an optional UI login identifier; API login always uses the user code.
Change status
Deactivate access that is no longer required. This blocks UI and API authentication without removing the identity or audit history. Activate the user to restore access.
Delete
Use deletion only for an identity created in error with no meaningful history. Prefer deactivation for anyone who has used Voyzu.
Good practice
Give every person and integration its own identity.
Use API-only identities for integrations where practical.
Assign company users only to companies they need.
Reserve organization and admin roles for all-company responsibilities.
Share passwords outside Voyzu through a secure channel.
Deactivate access promptly when it is no longer required.
See also
Last updated