User Access

Introduction

Users are managed through the Keycloak dashboard. Navigate to Access Management > Users from the lefthand menu. This will open the Keycloak dashboard in a new window. In this dashboard, you can create users, modify users, set access groups, and delete Insights users.

note

User management is handled entirely in the Keycloak module and is available only for users with superadmin role. Please refer to the detailed Keycloak user management documentation for full details on how Keycloak helps you manage user access.

Please refer to the Default Permissions Spreadsheet for more details about each role's access rights.

Prerequisites

An Email setup is required in Keycloak to ensure Insights users receive welcome emails, password reset links, and other account-related notifications.

Please contact Resolve support for help configuring the communication between your Keycloak and your SMTP server.

Create User in Keycloak

In Insights:

1. Navigate to Access Management > Users.
   • Only users with the superadmin role have access to this menu.
   • The Keycloak module will be open.

In Keycloak:

1. Navigate to Users menu.

2. Click Add user button.

3. Enter the Username for the newly created user.

4. (Optional) Enter Email, First name, and Last name.

   • If those fields are not filled in, upon first logging in to Insights, the user will have to fill them in.
   • You can require other user actions upon first login.

5. Click Create A new user will be created, and the user details will be opened.

6. (Optional) Open the Credentials tab and set a password for the newly created user.

7. Open the Role mapping tab.

8. Click Assign role.

9. Assign an access role:

   • Choose a role from the default access.
     • Make sure the filter is set to Filter by clients.
     • Select from the default UI roles with the insights-ui tag: ADMIN_GROUP, DISCOVERY_GROUP, or DEFAULT_GROUP.
   • Or choose a role from the custom access groups.
     • Change the filter to Filter by realm roles.
     • Select the access group you've created.
   note

   You can select more than one group, but the user will get the privileges for the role with the highest access.

10. Click Assign to assign the selected role/s to the user.

Edit User in Keycloak

You can manage users in Keycloak by changing their details, forcing them to reset passwords, disabling users, expiring user sessions, adding/removing access roles from users, etc.

In Insights:

1. Navigate to Access Management > Users.
   • Only users with the superadmin role have access to this menu.
   • The Keycloak module will be open.

In Keycloak:

1. Navigate to Users menu.
2. Select the user you want to edit.
3. Make the desired changes to the user.

Delete User in Keycloak

In Insights:

1. Navigate to Access Management > Users.
   • Only users with the superadmin role have access to this menu.
   • The Keycloak module will be open.

In Keycloak:

1. Navigate to Users menu.
2. Select the user you want to delete.
3. Click Delete user.