User details

Overview

The user details page shows everything about one account: who it is, whether it can sign in, which roles it holds, where it is signed in, and what it has done. Open it from Users: click a row to see the details in a side panel, or go to /admin/users/<user ID> for the full page. Both show the same hero and the same four tabs, Overview, Roles, Sessions and Audit.

Viewing the page needs users:read. Renaming, deactivating, reactivating, sending a password reset and revoking sessions need users:write. Adding and removing roles needs roles:write.

Screen tour

Click to enlarge

The hero shows the person’s initials, display name and email. Copy ID copies the user ID to the clipboard, for example to look the account up in the Audit log or in an API call.

Overview tab

Change the display name

1. Click Edit next to the name.
2. Type the new name in Display name.
3. Click Save, or Cancel to keep the old name.

The display name can’t be empty.

Roles tab

Click to enlarge

Add a role

1. On the Roles tab, click Add role.
2. Choose a role in Select a role…. The list shows only roles the person doesn’t hold yet.
3. Click Assign, or Cancel.

You can only assign a role whose permissions you hold yourself.

Remove a role

1. Click × on the role chip.
2. Click ✓ to confirm, or ✕ to keep the role.

At least one admin must remain

DeviceQuest protects the admin role so that your workspace always has an administrator:

• You can’t remove your own admin role. The tab says “You can’t remove your own admin role.”
• You can’t remove the admin role from the last active admin. The tab says “At least one admin must remain.”
• The same rule applies when you deactivate an account: you can’t deactivate yourself, and you can’t deactivate the last active admin.

To hand over administration, first give admin to someone else, then remove it from the old account.

Sessions tab

Click to enlarge

Every sign-in creates a session. The tab shows how many are active, for example 2 active sessions, and lists each one with its status. Revoke appears only on active sessions that haven’t expired.

Sign a person out everywhere

1. On the Sessions tab, click Revoke all.
2. Read “This will sign the user out of all devices immediately.”
3. Click Revoke all sessions, or Cancel.

DeviceQuest confirms with “All sessions revoked.” The person has to sign in again on every device. Combine this with Deactivate when someone leaves, or with Send password reset when you suspect a password is compromised.

Audit tab

Click to enlarge

The tab lists audit events recorded about this account, such as sign-ins, renames, role changes and deactivations, 25 at a time, with the total count above the list, for example 120 events. Click Load more (N remaining) to see older events. For filters, exports and the full history, use the Audit log.

Deactivate or reactivate the account

1. In the hero, click Deactivate.
2. Read “Deactivate email? They won’t be able to sign in. Data and audit history are preserved.”
3. Click Deactivate again to confirm, or Cancel.

To restore access, open an inactive account, click Reactivate, and confirm with Reactivate. To change many accounts at once, use the bulk bar on Users.

Send a password reset

1. In the hero, click Send password reset.
2. Read “Send a password reset link to email? The link is valid for 24 hours.”
3. Click Send reset email, or Cancel.

DeviceQuest emails a one-time link and confirms with “Password reset email sent.” The person follows the link to choose a new password. When they set it, all their existing sessions end. See Invitations and passwords.

Statuses

Account statuses

Session statuses

Keyboard shortcuts

Related pages

• Users and invitations
• Roles and permissions
• MFA policy
• Audit log