¶ Managing Users
Administrators manage user accounts, roles, and permissions across the Elementrix platform.
¶ Admin Capabilities
¶ 1. User Directory
User Overview:
Total Users: 1,247
- Active: 1,189 (95%)
- Disabled: 45 (4%)
- Deleted: 13 (1%)
Filter:
- Role: All, Admin, Owner, Steward, User
- Status: Active, Inactive, Suspended
- Domain: Any
- Last Login: Date range
Search:
- By name, email
- By role
- By domain
User List View:
- User name and email
- Status badge (Active, Inactive, Suspended)
- Assigned roles
- Last login timestamp
- Owned products count
- Stewarded products count
- Quick actions (Edit, View Details, Suspend)
Advanced Filtering:
Additional Filters:
- Creation date range
- Products owned: 0, 1-5, 6-10, 11+
- Products stewarding: 0, 1-5, 6-10, 11+
- Login activity: Last 7 days, 30 days, 90 days, Never
- Role type: Admin, Owner, Steward, Consumer
- Domain assignment: Specific domains
¶ 2. User Management
User Profile Management:
User: John Doe (john.doe@company.com)
Status: Active
Joined: 2024-03-15
Last Login: 2025-01-25 10:30 UTC
Roles: Data Owner, Data Steward
Products Owned (3):
- Customer Transaction History
- Product Catalog
- Inventory Management
Products Stewarding (5):
- Revenue Forecasting Model
- Customer Analytics Dashboard
- Fraud Detection System
- Marketing Campaign Data
- Supply Chain Metrics
Activity (30 days):
- Login Count: 47
- Products Created: 2
- Access Requests: 5
- Reviews Completed: 8
[Edit User] [Change Roles] [Suspend] [View Audit Log]
Edit User Profile:
Edit User: John Doe
Personal Information:
First Name: [John]
Last Name: [Doe]
Email: [john.doe@company.com] (cannot change)
Phone: [+1-555-0123]
Department: [Finance]
Job Title: [Senior Data Analyst]
System Settings:
Status: ☑ Active ☐ Inactive
Email Verified: ✓ Yes
MFA Enabled: ✓ Yes
Notification Preferences:
☑ Access request notifications
☑ Product update notifications
☑ Governance feedback
☐ Weekly digest
☑ Security alerts
[Save Changes] [Cancel]
Change User Roles:
Manage Roles: John Doe
Current Roles:
☑ REGULAR_DEFAULT_USER (cannot remove)
☑ Data Owner
☑ Data Steward
☐ DATA_GOVERNANCE
☐ SUPER_ADMIN
Domain Assignments:
☑ Finance
☑ Accounting
☐ Marketing
☐ Sales
☐ Operations
Custom Roles:
☑ Finance Data Steward
☐ Marketing Data Owner
☐ Analytics Team Member
Effective Permissions: [View Permission Matrix]
[Save Role Changes] [Cancel]
Suspend User:
Suspend User Account:
User: John Doe (john.doe@company.com)
Reason for Suspension:
☐ Policy violation
☐ Security concern
☐ Employment termination
☑ Other: [Temporary leave of absence]
Actions on Suspension:
☑ Revoke active sessions
☑ Disable API access for owned applications
☐ Reassign owned products: To [jane.smith@company.com]
☐ Remove steward assignments
☑ Notify user via email
☑ Archive activity logs
Suspension Duration:
☑ Indefinite (manual reactivation)
☐ Temporary: Until [2025-03-01]
Notes:
[User on medical leave, expected return March 2025]
[Confirm Suspension] [Cancel]
¶ 3. User Onboarding
Create New User:
Create New User:
User Information:
Email: [new.user@company.com]
First Name: [New]
Last Name: [User]
Department: [Marketing]
Job Title: [Data Analyst]
Initial Roles:
☑ REGULAR_DEFAULT_USER (automatically assigned)
☐ Data Owner
☑ Data Steward
☐ DATA_GOVERNANCE
☐ SUPER_ADMIN
[Create User] [Create and Add Another] [Cancel]
Keycloak Integration:
User Account Creation:
Elementrix will:
1. Create user in Keycloak realm
2. Generate temporary password
3. Send credentials via secure email
4. Require password reset on first login
5. Enforce MFA setup
Keycloak Settings:
Realm: elementrix
Username: new.user@company.com
Email Verified: No (user must verify)
Required Actions:
- VERIFY_EMAIL
- UPDATE_PASSWORD
- CONFIGURE_TOTP
[Proceed with Creation]
¶ User Offboarding
¶ Offboarding Checklist
Offboard User: John Doe
Pre-Departure (2 weeks before):
☑ Identify owned data products (3 products)
☑ Identify steward assignments (5 products)
☑ Assign transfer recipients
☑ Schedule knowledge transfer sessions
Day of Departure:
☑ Revoke Elementrix access
☑ Disable Keycloak account
☑ Revoke active sessions
☑ Disable API keys for owned applications
☑ Transfer product ownership
☑ Remove steward assignments
☑ Archive user data
Post-Departure:
☑ Verify no active sessions
☑ Confirm ownership transfers
☑ Update contact information on products
☑ Archive audit logs
☐ Delete personal data (after retention period)
[Complete Offboarding] [Schedule for Later]
¶ Transfer Ownership
Transfer Product Ownership:
From: john.doe@company.com (departing)
To: jane.smith@company.com (new owner)
Products to Transfer (3):
☑ Customer Transaction History
☑ Product Catalog
☑ Inventory Management
Actions:
☑ Update owner on all products
☑ Update public pages
☑ Notify new owner
☑ Update access control
☑ Transfer pending requests
☑ Preserve audit history
Knowledge Transfer:
☑ Share documentation
☑ Schedule handoff meeting
☑ Include stewards in transition
[Transfer Ownership] [Cancel]
¶ Best Practices
¶ User Provisioning
Onboarding:
- Use SSO for automatic provisioning
- Assign minimal initial roles
- Provide training materials
- Set up buddy system for new users
Role Assignment:
- Follow principle of least privilege
- Document role assignment reasons
- Review roles quarterly
- Remove unnecessary permissions
¶ Account Hygiene
Regular Reviews (Monthly):
- Inactive users (90+ days)
- Users with no product assignments
- Excessive permission users
- Orphaned accounts
Security Measures:
- Enforce MFA for all users
- Regular password rotation (if not using SSO)
- Monitor login anomalies
- Review failed login attempts
¶ Communication
User Notifications:
- Welcome emails for new users
- Role change notifications
- Suspension notices
- Reactivation confirmations
Documentation:
- Maintain user directory
- Document special permissions
- Keep offboarding records
- Archive audit logs
¶ Next Steps
- Configure Managing Roles for role management
- Set up SSO for seamless user authentication
- Review Active Directory Integration for user sync