Users

The Users page displays a list of users in all organizations in which you have Administrator permissions. On this page, you can:

• view and search users

• add users to the system 

• edit existing users

• export user data to Microsoft Excel or CSV format files.

On the Users page, the following tools are available in the toolbar:

• Find - If you enter a search term in the Find field on the top-left corner of the page, the grid content is filtered to only display users that match your search. You can clear the search field by clicking the X button.

• Resend: Can be used to send or resend invitations to Connected Forest® apps to multiple users at the same time. For more information, see Sending Batch Invitations to Users below.

• Export - Exports all data in the grid to the file format of your choice (Excel XLSX, CSV). You can select the export format from the menu that opens. For more information, see Exporting Data.

• Add - Opens a new window for adding a new user to the system.

The toolbar also contains the following checkboxes:

• Show only records for - When this option is selected, the grid only displays users in the organization you selected when you signed in. If you are an administrator in more than one organization, deselecting this checkbox refreshes the grid to display users in all your organizations. By default, this option is selected.

• Show inactive users - When this option is selected, users who have a user account but are not active in any organization are also shown on the list. By default, this option is not selected.

User Roles in SSO

There are four user roles in the SSO service:

1. Administrator
   Administrator users have permissions to maintain users and subscriptions for their organization using the administrative tools in the User Administration app. Administrators can manage their own subscriptions to apps.

2. Application User
   Regular Application Users do not have access to administrative tools. Application Users can access the apps to which they have a subscription.

3. Trimble Support
   The Trimble Support user role requires that the user is associated with an organization but does not need an active subscription to any organization. A user in this role would normally have Administrator permissions in all organizations with which they are associated. As the name of this role implies, it is intended to be used by Trimble Support staff (including Trimble Partners).

4. Trimble Viewer
   A user in the Trimble Viewer role can view all organizations, all users, all subscriptions, and all transactions, but does not have permissions to add, edit, or delete records anywhere in the User Administration app. A Trimble Viewer user does not have any listed organizations or require subscriptions.

Adding a User

You can add new users to the system on the Users page. The Administrator user for an organization creates user accounts for other users in the organization. For each new user, you must define the SSO user role and select the organization(s) to which the user belongs.

To add a user: 

1. Click the Add (+) button on the top-right corner of the page.
   The New User window opens. 

2. Enter the user's email address in the User ID (Trimble Identity) field.
   This is the username used to sign in to the app. This is a required field, and you must enter a valid email address.

Note: If you enter an email address that belongs to a user that has previously been defined, the First Name and Surname fields are automatically filled. In this case, continue with step 4.

3. Enter the user's First Name, Surname, and Phone number in the respective fields.
   First Name and Surname are required fields.

4. If you want to add an additional user description, enter it in the Description field.

6. If you are an Administrator in more than one organization and want to change the organization for the user, click open the Organization field in the Organizational Attributes section and select a different organization from the menu.
   By default, the user is added to the organization you selected when you signed in.

7. If you want to change the user's role for an organization, click the User Type field and select a different role.

   1. • Administrator - An Administrator user with access to the data and settings in the User Administration app.

      • Application User - A regular user with no administrative rights.

By default, the user is added as a regular Application User.

8. If you want to add the user to other organizations, click the Add (+) icon in the Organizational Attributes section.
   A new row is added to the grid. Select the Organization and the User Type.

Note: The same user can have a different role in different organizations.

9. Click the ADD button to create the user in the Connected Forest® application.

10. In the window that opens next, select whether you want to send an invitation to the user.

    1. • No:  No invitation is sent at this point. This option is useful in cases where additional setup is required before the user can sign in for the first time. For example, an Administrator may want to adjust the user's permissions in a particular Connected Forest® app. When the user is fully set up, you can open the user account for editing and click RESEND to send the invitation. Alternatively, if you are setting up multiple users, you can batch resend all the invitations later using the Resend button, as explained in section Resending Batch Invitations to Users below.

       • Yes: A Trimble invitation is sent to the user's email address as soon as the user account is created. Using the invitation, the user must create an account by entering the details required on the Create Account page and sign in to the Connected Forest® application. After the first sign-in, the user must agree to the License Agreement.

Note: An invitation is only sent if the user does not yet have a Trimble Identity (TID) account. If the user already has a TID account, no invitation is sent.

11. In the window that opens next, select whether you want to assign the user subscriptions to Connected Forest® apps.

    1. • Click YES to continue to the Subscriptions page, where you can assign the subscriptions. For instructions on adding subscriptions, see Subscriptions.

       • Click NO to assign subscriptions later.

After the required subscriptions have been added to the user's account, it is possible to add the user to app-specific user groups and assign the user app-specific user roles.

• To add a user to a group, open the user account for editing and click the GROUPS button. For more information, see User Groups below.

• To assign the user role(s) in a specific app, open the user account for editing and click the ROLES button. For more information, see App-Specific User Roles below.

Editing a User

To edit a user:

1. Click the row Edit (pencil) icon.
   The record opens for editing in a pop-up window. On the window header, the Created and Modified timestamps show who created and last updated the user data and when. The Last Login field indicates when the user last signed in.

   • If the user already accepted the Trimble invitation and successfully created an account, you cannot edit the user details on this page (for example, User ID, First Name, or Surname). Instead, the user must use the My Profile page under the User Profile menu to edit their details. For more information, see Navigation.

   • If the user has yet to accept the Trimble invitation and the account is not yet created, you can edit all the user details on this page (for example, User ID, First Name, Surname, and Description) and save changes by clicking the SAVE button.

     • If you modify the user's email address, a new Trimble invitation is sent to the updated email address after you click the SAVE button and the previously sent invitation will be revoked. 

     • If a Trimble invitation has not yet been sent to the user or the user accidentally loses or deletes the invitation, you can resend the invitation to the user's email address by clicking the RESEND button at the bottom of the Edit window. Once the user has successfully signed in, the RESEND button is no longer available. 

2. If you need to edit the user's organizations or SSO user roles, use the functionalities in the Organizational Attributes section.

   • You can add a new organization to the list by clicking the Add (+) button in the Organizational Attributes section. Clicking the button adds a new row to the grid. Select the user's Organization and User Type.

   • You can delete an organization from the list using the Delete (trash can) button on the organization row. Confirm the deletion by clicking Yes.

   • If you want to deactivate the user's association with an organization rather than delete the organization, deselect the Active checkbox on that organization row.

The user's app subscriptions are shown but cannot be edited here. If you want to make changes to the subscriptions, you can do so on the Subscriptions page. For more information, see Subscriptions.

3. If you need to edit the user groups to which the user belongs, click the GROUPS button and edit the groups as needed.
   For instructions on editing user groups, see User Groups below.

4. If you need to edit the roles the user has within specific apps, click the ROLES button and edit the roles as needed.
   For instructions on editing app-specific user roles, see App-Specific User Roles below.

5. When you are done editing the user account, click SAVE to save changes.

User Groups

Users in all user roles can belong to app-specific groups and have permissions within apps. For example, a regular Application User can belong to a specific group called 'Driver’ in the CFLogistics app.

You can add users to user groups on the Users page. Before you can add a new user to a user group, you must save the user account and assign the user the required app subscriptions. It is not possible to manage user groups before saving the user and assigning subscriptions.

The permissions related to app-specific roles can also be managed in the SSO service for some apps. For more information, see App-Specific User Roles below.

To add a user to user group(s):

1. On the Users page, click the Edit (pencil) icon on the user row.
   The record opens for editing in a pop-up window. 

2. Click the GROUPS button on the bottom-left corner of the window.
   The Groups window opens. The available groups are listed in the left panel and the groups to which the user belongs are shown on the right. 

3. Select the organization using the Organization menu.

4. Select the user group to which you want to add the user from the left panel.
   By default, all user groups for all apps are displayed. To filter the list, select an app from the Apps list.
   To select all groups on the list, click the All button on the left.

5. After selecting at least one group, click Add.
   The group is added to the user's user group list.
   You can also drag-and-drop groups from the left panel to the right panel.

6. Click FINISH to close the Groups window.

7. Click SAVE in the user window to save changes.

Note: Changes to user groups are not saved until you save changes to the user.

Removing a user from a user group works in a similar way: Select the group in the right panel (or select all using the All button) and click Remove. You can also drag-and-drop groups to the left panel. Click FINISH to close the Groups window and SAVE to save changes to the user.

App-Specific User Roles

In addition to their user role in SSO, users can have different roles within specific Connected Forest® apps. App-specific user roles are used to control which actions a user can perform in each app, for example. Default roles are granted to a user when subscriptions are assigned to the user in SSO, but app-specific roles can be adjusted on the Users page.

Before you can assign a role to a new user, you must save the user account and assign the user the required app subscriptions. It is not possible to manage app-specific user roles before saving the user and assigning subscriptions.

To assign app-specific role(s) to a user:

1. On the Users page, click the Edit (pencil) icon on the user row.
   The record opens for editing in a pop-up window. 

2. Click the ROLES button at the bottom of the window.
   The Configure Roles window opens.

3. Using the Select an Organization menu, select the organization for which you want to configure app-specific user roles.
   This opens the list of subscriptions the user has in the selected organization.

4. Using the Select a Subscription menu, select the app subscription.
   The list of available roles within the selected app opens below.

5. Select the role(s) you want to assign to the user.

6. Click OK to close the Configure Roles window.

7. Click SAVE in the user window to save changes.

Note: Changes to user roles are not saved until you save changes to the user.

Removing a role from a user works the opposite way: Deselect the role(s) you want to remove, click OK to close the Configure Roles window, and SAVE to save changes to the user.

Sending Batch Invitations to Users

Using the Resend button, you can send or resend invitations to Connected Forest® apps to selected users. This functionality is useful when you have created multiple new users and want to send batch invitations to all of them, for example.

To send or resend batch invitations:

1. If needed, filter the Users view to display the users to whom you want to send an invitation.

2. Select the users using the checkboxes on the far left of the row.
   To select all users, select the checkbox on the header row. This selects all rows displayed on the current page.

Tip: If the grid contains multiple pages of records, you must resend invitations to users one page at a time. To maximize the number of displayed records, set the Items per page option at the bottom of the grid to 20.

3. Click the Resend button.
   Invitations are sent to the selected users.

Note that invitations are not sent to users who have already accepted an earlier invitation and signed in to SSO.

Sending an invitation may fail if the invitation has expired, in which case an error message is displayed. If this happens, you can open the user account for editing and click the RESEND button in the user detail window to resend the invitation, as this creates a new invitation.