> For the complete documentation index, see [llms.txt](https://community-test.logicnets.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://community-test.logicnets.com/release-9/design-considerations-and-frameworks/user-management/managing-users/distributed-user-management.md).

# Distributed User Management

## Description

LogicNets releases above 7.4 include an update to the User Management Module that allows for distributing partial user management responsibilities to users other than the system administrator. By providing a user or users with a Group Administrator role, the system administrator gives identified users controlled access to the User Management Module to create and manage users of specific user groups within a LogicNets installation. The picture below explains the distributed user management concept:

![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-4116ec1c5e85d1a59816ad6caf2059ec06d58ece%2F74b83e3c-f43b-4d3d-a69b-751ac63850db.png?alt=media)

System administrators manage all of the users and user groups in the system, but system administrators can also set up group administrators, who will then have permissions that allow them to manage users within a specific group. This function allows for distributed user management and is especially useful for those companies with a large user base. System administrators can delegate certain user management tasks to group administrators.

## Use

This function is used as part of User Management for all LogicNets-based applications.

## Create User Groups to be Managed by Group Administrators

To use group administration functionality, you must first set up the user groups that will be managed by group administrators. Remember that only system administrators can set up user groups, so you must have system administrator privileges to complete these steps.

![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-d3a52cce0c86d2acfdf2e0644fa7b62eb6abffa9%2F24cd9367-4de4-48fb-9216-99f77872d00a.png?alt=media)

For this functionality, you will need to set up two user groups: the group that will contain the users to be managed and the group that will contain the group administrators. In the image above, the group that contains the administrators is identified with a 1 and the user group the administrators will manage is identified with a 2. You can also set permissions so group administrators can add users to the group administrator role as well, which is identified by the 3 in the image.

1. From the *Access Management* module, click the ***Groups*** button to enter Group Management.
2. Click ***new*** to add a new user group.
3. Enter the name of the first user group and a description for that group. Click ***Add***.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-9b872fd0c33146430d9dbc29f20ab2ba4f87be28%2F973ad459-12dc-438f-b5cc-e21e0dc42273.png?alt=media)
4. Click ***Save*** on the *Group Details* page to save the group.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-2eb65ef9bca33aa1176b7122fc436109a3bedef3%2Fd5842186-ad73-4cc0-bda1-dbb8a1477f5f.png?alt=media)
5. Repeat the first four steps, creating the administrator group for the first user group you created.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-56a1fcc8a566fa791224c6f549e8b1f12eb7967a%2F360af2da-812d-4ace-b090-a9100db9bf3f.png?alt=media)
6. Once you have created the two groups you need to set the relationship between them. From the list of groups, click the user group you created and click ***modify***.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-ea5db127cdcd27e13bbfae6f79dc18ca6f0bbb88%2Fb1e449f9-5c17-4f4c-866c-8b23324c7b56.png?alt=media)
7. In the *Managed By* section, select the name of the administrative group you created and click ***Save***.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-9b9d1253cb174b419dd1201034c6012b5dc3c4fa%2F843dde9f-27e8-48c8-8f66-f781b0641941.png?alt=media)
8. *Optional:* If you want to allow group administrators to add new administrators to their group, open the administrative group you created from the list of groups. In the *Managed By* section, select the name of the administrative group you created and click ***Save***.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-06be224581e787928fe00e592cf2d52d28c0053a%2F996e85a8-ffcd-4c16-9e7e-765b48031ea9.png?alt=media)

   Note that an administrator group can manage multiple user groups; for example, you can have vendor1\_users, vendor2\_users, and vendor3\_users. Vendor1\_administrator can manage vendor1\_users only, vendor1\_users and vendor3\_users, or all of the groups.

   Step 8 is optional and has benefits and risks:

   \- **Benefit:** Allowing group administrators to assign the role to more than one administrative user allows administrators coverage during busy periods or vacations. - **Risk:** Adding users to the administrator group allows them to add and delete other users. The rules surrounding the approach should be clear across all of the administrators. You may want to establish guidelines for user management for administrative users.
9. *Optional:* Set account expiry date and/or password expiry date. When you create a user's account, you can set the account to expire at a particular date; for example, you know the user is only going to be with your company for 3 months. You can also set the date on which the user's password will expire. In the user's account details, use the calendar icon next to these fields to select the dates. Click ***Save*** to save your changes.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-0ff2404b220dfe01c59dcd17c36c4e10bd3deca4%2F8d71140c-088e-494a-8401-857cae40a5c3.png?alt=media)

## Add Administrators to the Administrative Group

Once you have created your administrative and user groups, you can assign a user to the group administrator role and they can begin to manage the users in the user group you created. Add a user to the administrative group by either searching for an existing user and modifying this list of groups to which they belong or by adding a new user.

1. In the *Groups* section of the user's profile, first add the user to the group that allows them to see any administrative functionality. This group is called *system.accessmanagement.groupadmin*.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-13cae4caa37d60ef9908f976e78637bebff8da44%2F77e13ce3-5f0f-495d-bb2f-30d3dd2c44ab.png?alt=media)
2. From the *Groups* dropdown menu, now you must also select the name administrative group you created.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-edb238515861394416051f49d2944b81ab35cddc%2F23b95e5b-f018-4aa6-ab76-514fa2b49937.png?alt=media)
3. Click ***Save*** to save your changes.

Now this user has the ability to create new users and assign them to the user group under their administration.

## Manage Users in a User Group

User group administrators will see the *Access Management* icon on their portal page when they log into the LogicNets application. Unlike system administrators, however, group administrators will only see the *User* and *Groups* buttons at the top of the page.

![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-a1a356901c7a44f72dda535a63ccb4590ffedab6%2F47d0881a-9247-421d-9c6b-b4541f13f059.png?alt=media)

User group administrators can perform the following functions:

* Create a new user.
* Add a user to a group or groups.
* Modify a user's profile details.
* Reset a user's password.
* Delete an existing user.

When creating a new user, the group administrator can assign the user the groups that he is managing. The group manager can also assign users to the administrator group he manages to allow more than one person to manage the users assigned to a particular group. The group administrator can also remove users from the administrator group.

![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-9562eaa9fa5c84439b9a3638c96147fa19e902f7%2Ffeaf2171-d74d-4b6d-8cf6-aa1e9ae0a2de.png?alt=media)

User group managers do not have the privileges required to allow them to change settings such as the following:

* Packages on the Dashboard
* Workspaces on the Dashboard
* License Details
* User Roles

Those settings can only be modified by the system administrator.

## Remove User from a Group

User administrators are able to delete a user from a group; for example, if the user is no longer involved in the application or leaves the company. You should only use this feature if you create the user in error. To remove a user from the user group you manage it is better to deactivate the user's account instead. To do this, do the following:

1. Find the user in the list of users you manage.
2. Click ***modify*** to modify the user's information.
3. Under *Status*, select ***Inactive*** from the dropdown menu.

   ![](https://2802811211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdFhfexCjZ5JMhwGzzywq%2Fuploads%2Fgit-blob-6e69929658c7670794771f8ecc60f1b79efb389f%2F175ca875-c4b7-47fc-8ed6-e432708fdc90.png?alt=media)
4. Click ***Save*** to save your changes.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://community-test.logicnets.com/release-9/design-considerations-and-frameworks/user-management/managing-users/distributed-user-management.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.