Create and Manage Users¶

Create New Users¶

Before you proceed, consider checking out user-related video tutorials in the Oro media library:

• How to set up user profiles

• How to create and manage users

To create a new user in OroCRM:

1. Navigate to System > User Management > Users in the main menu.

2. On the All Users page, click Create User on the top right.

   The following page opens:

   

3. In the General section, provide the following information:

   Note

   Fields with a red asterisk are mandatory.

   • Owner — Select a business unit from the list. The owner of the user record represents a business unit whose members can manage the record subject to the access and permission settings.
   • Enabled — Select a user status from the list.
     • Enabled — The user can log into the system, do their work within it, and be the owner of entity records.
     • Disabled — The user cannot log into the system or be the owner of entity records.
   • Username — The name that the user will use to log into the system.
   • Password — The password that the user will use to log into the system. Password requirements are configured in the system settings. If the password you entered is not accepted, a notification is displayed in the password field.
   • Re-enter Password — Provide the password again to confirm it.
   • Name Prefix — A name prefix used in front of the user’s name.
   • First Name — The first name of the user displayed on the interface when the user logs in.
   • Middle Name — The middle name of the user.
   • Last Name — The last name of the user. Together with the user’s first name, the last name is displayed on the interface when the user logs in.
   • Name Suffix — A name suffix of the user. A name suffix is used after the user’s name and provides additional information about the user.
   • Birthday — Click this field and select the user’s date of birth using a pop-up calendar. Alternatively, type the date in the format defined by your current locale.
   • Avatar – Click Choose File to upload a photo of the user you are creating.
   • Send An Email Invitation — Select this check box to send an email invitation to the user once the profile is created. The invitation is sent to the email address specified in the Primary Email field.
   • Primary Email — The main email address of the user.
   • Emails — Click Add Another Email and type an additional email address in the field that appears. You can add as many email addresses as required. To delete an email address, click x next to the email field that you want to delete.
   • Phone — The user’s phone number.

4. In the Additional section provide more information about the user (e.g. the job title). When visible custom fields are added to the User entity, they appear in this section.

5. In the Groups and Roles section, select the required system-wide group and role for the user you are creating.

   Important

   If you have OroCRM Enterprise edition, and you wish to limit access of the user you are creating to a specific organization, select it in the Access Settings section. If the organization has organization-specific roles, these will appear on the list in the Group and Roles section once you select the required organization in Access Settings.

   The following screenshot illustrates system-wide roles with no organization selected in Access Settings:

   

   The following screenshot illustrates the organization-specific role added to the list once the organization is selected in Access Settings:

   

6. In Access Settings select the check boxes in front of the organization(s) you want the user to have access to.

   Caution

   Note that the user will not be able to log into the system if no organization is selected for them. In addition, at least one role must be selected. Otherwise, you will not be able to save the user.

   • In the Organization Business Units field, provide the business unit name, or select it from the list. On the list, you can see business units of the organizations selected in the Organizations subsection.
   • You can select one or more business unit. In this case, the data owned by the user will be considered as belonging to all these business units and users that have access to these business units and corresponding permissions will be able to access it.
   • When the user’s role includes division level permissions, the user will be able to access data of each business unit specified in these sections, as well as the data of the whole chain of business units subordinated to those selected in this section.

7. Click Save.

   Note

   To create another user straight away, click Save and New.

Once the user is created, it becomes available in the table of all users under System > User Management > Users:

1. To view details of a specific user, click once on the user name in the table to open their page.

   

2. To edit details of a specific user, click in the ellipsis menu at the end of the row of the selected user. Alternatively, open the page of the user and click Edit on the top right.

   

For information on the activities you can perform from the user profile page (such as send an email, or assign a calendar event), check out the Activities topic.

Create Users via LDAP¶

OroCRM Enterprise edition supports integration with LDAP (Lightweight Directory Access Protocol) server which enables you to import existing user information (including role identifiers) from the LDAP server into OroCRM.

To enable import of LDAP records, you first need to set up integration with LDAP. Once the integration is established, user profiles are imported to OroCRM and users can use their usual credentials to log into the application.

Using LDAP integration does not prevent you from creating user records in OroCRM manually. Manually created user records are not imported back to your LDAP server.

System administrators can tell if a user has been added via the LDAP integration. The LDAP Distinguished Names field in the profile of these users contains integration-specific values.

For more information on the integration with LDAP, please see the topic on LDAP integration .

Manage Users¶

Delete a User¶

To delete a user from the system:

1. Navigate to System > User Management > Users.

2. In the table of all users, hover over the ellipsis menu at the end of the row of the selected user, and click Delete.

   Important

   Keep in mind that you can delete only those users who have no records assigned to them.

   

3. In the Deletion Confirmation dialog box, click Yes, Delete.

Note

Alternatively, you can delete a user from their user page by clicking the Delete on the top right.

Generate an API Key for a User¶

When the integration with a third-party software or other work requirements demand a user to have the API access to OroCRM key for the user. This key is used to grant the user access to the required API while protecting their password from being disclosed to the third party.

1. Navigate to System > User Management > Users in the main menu.

2. On the page of all users, click once on the selected user to open their page.

3. In the General Information, click Generate Key next to the API Key field.

   

Once the API key is generated, the user can execute API requests via the sandbox, Curl command, any other REST client, or use the API via the custom application.

Configure User-specific Settings¶

In OroCRM, you can configure settings specifically for the selected user. These settings may include localization options, display settings, for instance. The settings you configure per user are applicable only for the current organization.

To configure system settings for a particular user:

1. Navigate to System > User Management > Users.

2. On the page of all users, click once on the selected user to open their page.

3. On the user page, click Configuration on the top right.

   

In addition to configuring settings for the user as the administrator, each user can configure their settings from their user profile page. You can find more information on the configuration settings available on user level in the User-level Configuration Settings topic.

Change/Reset User Passwords¶

You can change and reset the password for a specific user on their profile page in the More Actions menu:

1. Navigate to System > User Management > Users.

2. On the page of all users, click once on the selected user to open their page.

3. On the user page, click More Actions on the top right.

   • Click Change Password to open a new dialog and provide a new password. Alternatively, you can click the Suggest Password link to generate a secure random password. To see / hide the entered password, click the Show/ Hide icon next to the New password field. Once a new password is provided, a reset password email is sent to this user.

     

   • Click Reset Password to send an email to the user with a new password.

     

     The user will not be able to log into the application until their password is changed. In this case, the user authentication status changes to Password reset. It will return to Active when the user changes the password.

     

Note

Alternatively, you can reset password for a specific user from the table of all users. For this, hover over the ellipsis menu at the end of the row of the selected user, and click Reset Password.

Reset Multiple Passwords¶

When you suspect a security breach, you can reset passwords for multiple users at the same time:

1. Navigate to System > User Management > Users.
2. In the table of all users, select the check boxes in front of the names of those users whose passwords you want to reset.
3. Click the ellipsis menu at the right end of the table header row and then click Reset Password.
4. In the Reset Password dialog box, click Reset. The password reset links are sent to the primary email addresses of the selected users.

Important

The users will not be able to log into the application until their passwords are changed. Note that user authentication statuses change to Password reset. They will return to Active when the users complete password change procedure.

Related Articles

• Create and Manage User Groups
• Create Business Units
• Create and Manage Organizations
• Work with Multiple Organizations
• Introduction to Role Management