Skip to content
DeviceQuest DeviceQuest DeviceQuest Docs User Documentation

Documentation

Users

Invite people, see who has access and how recently they signed in, and deactivate or reactivate accounts.

Overview

Users (Admin → Users) is the directory of everyone who can sign in to your workspace. It shows each account’s status, roles and last sign-in, the invitations you have sent, and a summary of your roles. Use it to invite new colleagues, find accounts that have gone quiet, and deactivate or reactivate accounts, one at a time or in bulk.

The page has three sections, People, Invitations and Roles. Invitations also have a page of their own at Admin → Users → Invitations (/admin/users/invitations).

To open the page you need users:read. Inviting, resending and revoking invitations and deactivating or reactivating accounts need users:write. The role list in the Invite user dialog and the Roles section need roles:read.

Screen tour

  1. Directory: the total number of accounts, with a bar that shows how many are active, stale and inactive.
  2. Counters: Active, Stale 90d+, Admins and Pending invites. Click Active, Stale 90d+ or Admins to filter People, and click it again to clear the filter. Pending invites jumps to the invitations filtered to Pending.
  3. Activity sentence: a one-line summary such as “1 active user, 2 admins.” It also tells you how many pending invitations expire within 7 days, how many users haven’t signed in for 90+ days, and when the last activity happened. The underlined parts are links that apply the matching filter.
  4. People, Invitations and Roles: jump to that section of the page.
  5. Search by name or email…: filters People as you type.
  6. Status filter: All, Active, Inactive or Stale. See Statuses.
  7. Sort: Newest, Last sign-in, Email or Name. The arrow button next to it switches between ascending and descending order.
  8. Invite user: opens the Invite user dialog.
  9. Select: tick accounts to act on them together. The header checkbox selects every account on the current page. Your own account can’t be selected.
  10. Status: the account’s status chip.

Each row shows the person’s name and email, their Status, their Roles and their Last sign-in. Click a row to open the account in a side panel with the same hero actions and tabs as User details. The list shows 25 accounts per page; use Previous and Next below the table to move between pages.

The search, status filter, sort and page number are kept in the address bar, so you can bookmark or share a filtered view.

Invitations and roles sections

  1. Invite user: opens the same Invite user dialog as the button above the People table.
  2. Invitation filter: All, Pending, Accepted, Expired or Revoked.
  3. Actions: what you can do with each invitation. See Manage invitations.
  4. Role name: opens the role in Roles and permissions.
  5. MFA required: Required when the role requires multi-factor authentication, otherwise No.

The Invitations table lists each invitation’s Email, Status, when it Expires, and its Actions. The Roles table lists every role with its Name, how many Members hold it, and whether MFA required is set.

Invite a user

  1. Email: the address the invitation is sent to. Required.
  2. Role: the role the person gets when they accept. Required; there is no default, so you always choose one.
  3. Display name: optional. The person can change it when they accept.
  4. Cancel: closes the dialog without inviting anyone.
  5. Send invitation: creates the invitation and emails the link.
  1. Click Invite user.
  2. Enter the Email, for example [email protected].
  3. Choose a Role.
  4. Optionally enter a Display name.
  5. Click Send invitation.

DeviceQuest emails an invitation link and shows “Invitation sent to …”. The invitation appears in Invitations as Pending and is valid for 7 days. The person opens the link, sets their name and password, and is signed in. See Invitations and passwords.

You can only invite someone into a role whose permissions you hold yourself. If the invitation is created but the email can’t be delivered, the dialog says “Invitation created but email could not be sent. Use Resend to retry.” When the control plane runs in development mode, the dialog also shows the invitation URL with a Copy link button, so you can hand the link over directly.

The dialog checks the address as you type and asks you to “Enter a valid email address, e.g. [email protected].” It rejects an address that already belongs to a user or has a pending invitation.

Manage invitations

Each invitation row offers the actions that fit its status:

StatusActions
PendingResend emails a fresh link and restarts the 7-day validity. The old link stops working. Revoke asks “Revoke invitation?”; click Revoke again to confirm, or Cancel.
AcceptedView user opens the account the invitation created.
Expired, RevokedInvite again opens Invite user with the same email and role filled in.

You can resend an invitation once a minute. A confirmation such as “Invitation email re-sent.” or “Invitation revoked.” appears at the bottom of the page.

The Invitations page

Admin → Users → Invitations shows the same invitation list on a page of its own, with the status filter and Invite user. Click Users at the top to go back to the directory.

  1. Status filter: All, Pending, Accepted, Expired or Revoked.
  2. Status chip of the invitation.
  3. Resend: sends the invitation again with a fresh link.
  4. Revoke: cancels the invitation after you confirm.
  5. Invite user: invites someone else.

Deactivate or reactivate accounts

A deactivated account can’t sign in. Its data, role assignments and audit history are kept, and you can reactivate it at any time.

To change several accounts at once:

  1. Selection count, for example 2 selected.
  2. Reactivate: lets the selected accounts sign in again.
  3. Deactivate: asks you to confirm, then blocks sign-in for the selected accounts.
  4. Clear: clears the selection.
  1. In People, tick the accounts.
  2. Click Reactivate, or click Deactivate.
  3. For Deactivate, the bar asks “Deactivate 2 users? They will not be able to sign in.” Click Confirm deactivate, or Cancel.

DeviceQuest reports the result, for example “Deactivated 2 users.” If some accounts can’t be changed, it says how many failed, for example “Deactivated 1 of 2 users; 1 failed.” You can’t deactivate your own account, and DeviceQuest keeps at least one active admin, so it refuses to deactivate the last one.

To change one account, open it and use Deactivate or Reactivate in its hero. See User details.

Fields

FieldDescriptionRules
EmailWhere the invitation is sent. Becomes the person’s sign-in name.Required. Must be a valid address that has no account and no pending invitation.
RoleThe role assigned on acceptance.Required. You can only grant permissions you hold.
Display nameThe name shown in the app.Optional.

Statuses

Account statuses

StatusMeaningNext possible status
ActiveThe account is enabled and has signed in within the last 90 days.Stale after 90 days without a sign-in; Inactive when deactivated.
StaleThe account is enabled but hasn’t signed in for more than 90 days, or has never signed in.Active at the next sign-in; Inactive when deactivated.
InactiveThe account is deactivated and can’t sign in.Active or Stale when reactivated.

Invitation statuses

StatusMeaningNext possible status
PendingSent and waiting for the person to accept.Accepted, Revoked or Expired.
AcceptedThe person accepted and their account exists.—
ExpiredNot accepted within 7 days. The link no longer works.Use Invite again to send a new invitation.
RevokedCancelled by an administrator. The link no longer works.Use Invite again to send a new invitation.

Keyboard shortcuts

KeyAction
← → ↑ ↓In a status filter, move to the previous or next status and apply it.
Enter / SpaceOn a focused row in People, open the account.
EscClose the Invite user dialog or the account side panel.