User management: Overview

A user is a person that logs in to Tungsten AP Essentials to utilize its services. Administrators can add new users to the system and view and edit existing users on the Users view.

When you add a user to an account, the user has access to the customers and documents of that account. For example, a service-bureau employee who handles documents for several accounts should be associated with all the accounts he handles. Customers, however, should only be associated with their own companies, so they can only validate their own documents.

A user group is a collection of users that all have the same privileges and access to the same buyers or sellers (if any). User groups make it easier to organize and maintain users and privileges. For example, if you create a group for Office users that contains several privileges, the next time you create a new Office user, you simply add the user to the group, instead of assigning all the individual privileges. You can also assign user groups to workflow steps, if you use the Workflow service.

Administrators can create user groups on partner accounts, customer accounts, and customer groups.

Users can have one or more roles which determine what tasks they can perform in the system. Each role can contain one or more privileges. You can use roles to organize privileges into logical groups which make it easier to assign them to users. The Admin and User roles are internal roles that cannot be removed or changed.

• Admin - Administrators who manage accounts, users and settings in Admin Center. The Admin user must have the Manage accounts privilege in order to change settings. Without this privilege, administrators can access the Admin Center, but they cannot edit settings.
• User - Users who process documents and only have access to Tungsten AP Essentials Office.

Privileges determine what actions users can perform and what areas they have access to. For example, the Access UPLOAD privilege grants access to the upload view, Access VERIFY grants access to the document view and so on.

Some privileges are associated with a specific service. For example, the Access STORAGE privilege is only available when the Storage service is enabled. If you disable a service that has a privilege associated with it, the privilege is removed from all users that have that privilege. A warning is displayed before any privileges are removed.

Administrators cannot grant or remove privileges that they do not have themselves. For example, if an administrator wants to grant the Manage accounts privilege to another user, the administrator must also have the Manage accounts privilege. Likewise, if an administrator wants to remove the Manage accounts privilege from another user, the administrator must have the Manage accounts privilege.