> For the complete documentation index, see [llms.txt](https://docs.facephi.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.facephi.com/docs.facephi-en/products/facephi-intelligence-platform/modulos/user-management.md). # User management User Management allows managing the people who have access to FIP and defining which modules, information, and actions each one can use.
From this module you can: * View the tenant's users. * Create new users and assign profiles to them. * Modify their data and profiles. * Deactivate and reactivate access. * Send a password recovery email. * Delete users. * Perform actions on multiple users. * Generate user reports. * Create and configure profiles. * Define permissions by module. * View and manage the users associated with each profile. The available options depend on your role, your permissions, and the hierarchy of the user or profile you want to manage. {% hint style="info" %} Changes made to profiles and permissions affect the user's access to the rest of FIP. Review assignments before saving or deleting information. {% endhint %} *** ## How it is organized User Management is divided into two tabs: * **User list**, to view and manage users. * **Profiles**, to configure profiles and permissions.
**User list** is the tab that opens by default. The selected tab is maintained when you navigate through the module's internal screens. *** ## Access and permissions Not all users can access User Management or perform the same actions. Depending on your profile, you may have permission to: * View users and profiles. * Create users. * Edit users at your own level or a lower level. * Deactivate, reactivate, or delete users. * Create and edit profiles. * Define permissions by module. * Delete profiles. * Generate reports. Actions for which you do not have permission may remain hidden or disabled. ### Role hierarchy The hierarchy limits which users, profiles, and permissions you can manage. A user cannot: * Create profiles with a higher level than their own. * Grant permissions they do not have. * Edit users with a higher level. * Modify their own account. * Deactivate or delete their own account. {% hint style="warning" %} To modify your account, another user with the necessary permissions must perform the action. {% endhint %} *** ## User list User list shows the users registered in the tenant. The counter in the header indicates the total number of users.
From this screen you can: * Search and filter users. * View their status and profiles. * Open their details. * Create a user. * Perform individual or bulk actions. * Generate a report. ### Search users Select **Search** to open the search field. You can search by: * Name. * Surnames. * Email. * User ID. Search is not case-sensitive. Select the field's delete icon to remove the term and return to the full list. ### Filter users Select **Filters** to open the filters panel. You can filter by: * **Registered date:** date on which the user was registered. * **Last login:** date and time of their last access. * **Profiles:** assigned profiles. * **User status:** Active, Inactive, or All. The different filters are combined using **AND**. The user must meet all selected criteria. The selected values within **Profiles** are combined using **OR**. The user can have any of the chosen profiles. ### Remove filters Active filters appear above the list. You can: * Remove a filter by selecting its label icon. * Modify its value. * Select **Clear all** to remove all filters. When there are no matches, modify the search or the applied filters. ### Results Each row represents a user. The list may include the following columns:
#### User details Shows: * Avatar. * First and last name. * Email. Inactive users are visually differentiated from active ones. #### User ID Shows the user's unique identifier. Select the copy icon to copy it to the clipboard. #### Last login Shows the date and time of the last access. If the user has not logged in yet, appears **Never logged in**. #### Created at Shows the date the user was created. #### Profiles Shows the assigned profiles using tags. When the user has multiple profiles, the list may show only some and group the rest under an indicator such as `+N`. Select the indicator to view all assigned profiles. #### User status Indicates the access status: * **Active** * **Inactive** #### Actions Includes the action to open details and a menu with available actions. Depending on the user's status and your permissions, the menu may include: * **Edit user** * **Deactivate user** * **Reactivate user** * **Recover password** * **Delete user** ### Sort results Select the header of a sortable column to change the order of the results. Only one sorting criterion can be active. Sortable columns may include: * User details. * Last login. * Registered date. ### Change page Use the pagination at the bottom of the list to view more users. Searches, filters, and the active selection are maintained when changing pages. ### Open a user Select the view icon of the column **Actions**.
The detail will open in read-only mode. Select **Edit user** from the actions menu to open edit mode directly. *** ## Create a new user Select **Create new user** from User list. A modal will open to enter the new user's data.
### User data Complete the required fields: * Name. * Surnames. * Email. * Profiles. The email must be in a valid format and cannot be associated with another user on the platform. ### Assign profiles Open the selector **Profiles**. Each option shows: * Profile name. * Description. * Selection checkbox. You can assign more than one profile. Selected profiles appear as tags and can be removed before creating the user. You can only select profiles compatible with your role and hierarchy. ### Finish creation Select the button **Create new user**. Before creating the user, the system checks: * That the required fields are complete. * That the email has a valid format. * That the email is not registered. * That at least one profile has been selected. If there is an error, correct the indicated field and try again. After creating the user: * The modal closes. * The list updates. * The total counter increases. * The system sends the invitation to the indicated email. * A confirmation appears. Select **Cancel** or close the modal to exit without creating the user. {% hint style="info" %} Creating a user starts sending the invitation, but the process to set their credentials belongs to the platform's access Flow. {% endhint %} *** ## User detail The detail gathers the user's data, profiles, status, and access information.
### Header information The header may show: * Registered date. * Last login. * User ID. * User status. Select the copy icon to copy the User ID. ### Personal data This section shows: * Avatar. * Name. * Surnames. * Email. * Language. * Time zone. ### Profiles Shows the available profiles and which ones are assigned to the user. Each profile can include: * Basic role. * Name. * Description. * Assignment status. ### Read-only mode When opening the detail from the view icon, the information cannot be modified. Select **Edit** to access edit mode, when you have permission. If another user is editing the same record, edit mode will not be available until they finish. *** ## Edit a user You can open edit mode from: * **Edit user**, in the list menu. * **Edit**, within the detail. ### Edit personal data You can modify: * Avatar. * Name. * Surnames. * Language. * Time zone. The email remains read-only and cannot be modified. ### Change image Select **Upload image** to add or replace the avatar. The image must be in `.png` or `.jpg`. Select **Remove** to delete the current image. ### Change profiles In the section **Profiles**: 1. Check the profiles you want to assign. 2. Uncheck those you want to remove. 3. Review the permissions the user will gain or lose. 4. Select **Save changes**. Only the profiles you can assign according to your hierarchy appear. ### Save changes The button **Save changes** is enabled when you modify any data. When saving: * Personal data is updated. * Profile assignments are updated. * New permissions are applied on the platform. * A confirmation appears. If a technical error occurs, the entered data remains on screen so you can try again. ### Simultaneous editing Only one person can edit a user at a time. When another user is editing the record: * The detail opens in read-only mode. * Editing actions are not available. * A notice appears indicating that the user is being edited. Edit mode becomes available again when the other person saves, cancels, or leaves the screen. ### View your own account You can open your own detail to view: * Personal data. * Email. * Profiles. * Status. * Access information. Your account is shown in read-only mode. You cannot: * Edit your data from User Management. * Change your profiles or permissions. * Deactivate yourself. * Delete your account. *** ## User status and access A user can be in one of these states: * **Active:** can access the tenant with the permissions of their profiles. * **Inactive:** cannot access the tenant until reactivated. Deactivating a user does not remove their profiles. When reactivated, they recover the assignments they previously had. ### Deactivate a user You can start the action from: * The row menu. * The detail of an active user. * The action bar, when you select a single active user.
Select **Deactivate user**. A confirmation modal will open. After confirming: * The user loses access to the tenant. * Their status changes to **Inactive**. * Their profiles are retained. * Their detail switches to read-only mode. * The available action changes to **Reactivate user**. Select **Cancel** to close the modal without making changes. {% hint style="warning" %} Before deactivating a user, check that the action will not interrupt a task or responsibility that needs to be reassigned. {% endhint %} ### Inactive user When a user is inactive: * Their data is shown in read-only mode. * Their profiles cannot be modified. * Their avatar cannot be changed. * **Recover password** is not available. * The action **Reactivate user** remains available for authorized profiles. ### Reactivate a user You can start the action from: * The row menu. * The detail of an inactive user. * The action bar, when you select a single inactive user. Select **Reactivate user**. A confirmation modal will open.
After confirming: * The user regains access to the tenant. * Their status changes to **Active**. * They recover the profiles and permissions they had before deactivation. * Their data can be edited again. * The available action changes to **Deactivate user**. ### Recover the password Select **Recover password** from: * The actions menu. * The detail of an active user. The system sends a recovery email to the registered address. The action: * Is only available for active users. * Does not modify their data. * Does not change their profiles. * Does not close the current screen. A confirmation appears after sending. ### Delete a user Select **Delete user** from the actions menu or from the selection bar. A confirmation modal will open.
After confirming: * The user is permanently deleted. * Loses access and associated assignments. * The list and total counter update. * A confirmation appears. {% hint style="warning" %} Deleting a user is an irreversible action. Use **Deactivate user** when you want to temporarily remove their access and keep the possibility of restoring it. {% endhint %} *** ## Actions on multiple users Select one or more users using the list checkboxes.
The action bar shows: * The number of selected users. * The actions available for that selection. Selection is maintained when changing pages. ### Select a page Use the header checkbox to select all visible users on the current page. You can change pages and add more users to the selection. ### Available actions Depending on the selection, you can find: * **Deactivate user**, when selecting a single active user. * **Reactivate user**, when selecting a single inactive user. * **Delete user**, when selecting one or more users. The other actions in the header remain disabled while there is an active selection. ### Confirm a bulk action All actions require confirmation. Before continuing: 1. Check the number of selected users. 2. Verify that the action is correct. 3. Select the confirmation button. When finished, the list and the counter are updated. *** ## Generate a user report Select **Generate report** from User list. The report is generated in CSV format and includes the full corresponding set of users, not just those on the visible page.
### Download all users Keep the option disabled **Apply filters**. Select **Continue** to generate a report with all users. ### Apply filters to the report Activate **Apply filters**. You can filter the report by: * Last login. * Registered date. * Profiles. * User status. Select **Clear all** to remove the report filters. {% hint style="info" %} The report filters are independent of the filters applied to the list. Configure them within the modal before generating the file. {% endhint %} ### Report content The file can include: * Name. * Surnames. * Email. * User ID. * Registration date. * Last access. * Assigned profiles. * Status. ### Download the file Select **Continue**. While the report is being generated, a progress indicator is shown. When it finishes: * The browser starts the download. * A confirmation appears. If an error occurs, no incomplete file is downloaded and you can try again. *** ## Profiles Profiles brings together the templates that determine the basic role and the permissions that can be assigned to users.
A user can have one or more profiles. Changes made to a profile are applied to all users who have it assigned. ### Search profiles Select **Search** and enter the name of the profile you want to find. Remove the term to return to the full list. ### Filter profiles Select **Filters**. You can filter by: * **Basic role** * **Last update** * **Created at** Active filters appear above the list and can be removed individually. ### Results Each row represents a profile. The list can include: #### Profile name Displays the profile name. #### Profile ID Displays the unique identifier. Select the copy icon to copy it. #### Basic role Displays the basic role on which the profile is built. #### Description Summarizes the purpose of the profile. When the text appears truncated, hover over it to see the full description. #### Number of users Displays how many users have the profile assigned. #### Last update Displays the date and time of the last modification. #### Created at Displays the creation date. #### Actions Includes actions to: * Edit the profile. * Delete it, when it has no assigned users. *** ## Basic roles Each profile starts from a basic role that sets its overall access level. ### Admin Has access to all contracted and activated modules. Can manage configuration, users, and profiles within their scope. ### User Operator Accesses only User Management. Can view, create, and manage users, but does not access the rest of the modules or the platform's general configuration. ### Manager Can configure and manage functional platform parameters according to the assigned permissions. May have permissions to manage product rules, configurations, and operations. ### Analyst Can view and analyze the information generated by the modules to investigate fraud and support decision-making. {% hint style="info" %} The basic role defines the overall level. The permissions selected in the profile specify which modules and actions are available. {% endhint %} *** ## Create a profile Select **Create new profile** from Profiles.
### Profile data Complete: * **Profile name** * **Profile description** * **Basic role** The **Profile ID** is generated automatically and cannot be modified. ### Select the basic role Open the selector **Basic role**. Only the roles you can create according to your hierarchy are shown. Select the information button to view the description of each role. {% hint style="warning" %} The basic role cannot be modified after creating the profile. Check that it is correct before continuing. {% endhint %} ### Select permissions Permissions are grouped by module. Only the following appear: * The modules contracted and activated for the tenant. * The permissions your own user has. You can: * Search for a permission by name. * Select permissions individually. * Select all available ones. * Clear all selections. The counter **Selected permissions** indicates how many permissions the profile has. You cannot grant a permission you do not have. ### Finish creation Select the button **Create profile**.
The button remains disabled until the required fields are valid. After creating the profile: * Its identifier is generated. * The configuration is saved. * The profiles list opens. * A confirmation appears. *** ## Edit a profile Select the edit action from the list. The detail is organized into two tabs: * **Profile configuration** * **Users with profile** ### Profile configuration This tab shows: * Name. * Description. * Basic role. * Profile ID. * Selected permissions. * Creation date. * Update date. You can modify: * The name. * The description. * The permissions. You cannot modify: * The Basic role. * The Profile ID. ### Save changes Select **Save changes** to update the profile.
Changes to its permissions are applied to all users who have it assigned. Select **Discard changes** to discard the changes and recover the last saved configuration. {% hint style="warning" %} Before removing a permission, check how many users have the profile assigned and which tasks they will no longer be able to perform. {% endhint %} ### Simultaneous editing Only one person can edit a profile at a time. If the profile is being edited: * It opens in read-only mode. * Editing actions are not available. * A warning appears. Edit mode is restored when the other person saves, cancels, or leaves the screen. *** ## Users associated with a profile Open a profile and select **Users with profile**. This tab shows the users who have the profile assigned. ### Search and filter users You can search within the list and filter by: * Last login. * Registered date. * User status. There is no profile filter because all results already belong to the open profile. ### Add users Select **Add users**. Search for and select the people you want to add. Confirm the action to assign them the profile. After confirming: * The users appear in the list. * The counter is updated. * They receive the profile permissions. ### Remove a user Select the action to remove the profile assignment. Confirm the action. The user: * No longer appears in the list. * Loses the permissions granted exclusively by that profile. * Keeps the permissions obtained through other profiles. ### Remove several users Select users using the checkboxes. Select **Remove users**. The modal shows how many users will be affected. After confirming: * The assignments are removed. * The counter is updated. * The users lose the permissions granted by the profile. {% hint style="warning" %} Removing users from a profile may prevent them from accessing modules or performing actions. Check whether they have other profiles before confirming. {% endhint %} *** ## Delete a profile A profile can only be deleted when it has no assigned users. If it still has users: * The delete action remains disabled. * You must open **Users with profile**. * Remove all assignments. * Return to **Profile configuration**. When the number of users is `0`: 1. Select **Delete profile**. 2. Review the confirmation modal. 3. Confirm deletion. After confirming: * The profile is permanently deleted. * It disappears from the list. * A confirmation appears. {% hint style="warning" %} Deleting a profile is irreversible. It cannot be reassigned or recovered after confirming. {% endhint %} *** ## Bring a team on board To prepare access for a new team: 1. Open **Profiles**. 2. Create the necessary profiles for each type of responsibility. 3. Select the appropriate basic role. 4. Grant only the necessary permissions. 5. Open **User list**. 6. Create the users. 7. Assign the corresponding profiles to each person. 8. Check the status and assignments from the list. In a new tenant, an initial guide may appear to help you create the first profile and the first user. You can follow it or close it to configure the team manually. *** ## Remove a user's access When a person no longer needs access: 1. Locate the user in **User list**. 2. Review their profiles and responsibilities. 3. Reassign any task that depends on that person. 4. Select **Deactivate user** to immediately remove their access to the tenant. 5. Keep the user inactive if access may be restored in the future. 6. Select **Delete user** only when you want to delete it permanently. Use deactivation as the default option when there is a possibility that the person may need access again.