Skip to main content

Users

Prerequisites

Access Level:User, Sub-admin, Admin
Permission Requirements
  • . Basic Vault Interaction
    • Create file metadata
  • . User Administration
    • View all users in the system
    • Edit their own and lowered-roled users' metadata
    • Edit their lower-roled users' permissions
    • Promote lower-roled users up to their role
    • Demote lower-roled users to even lower role
    • View profiles (roles/permission templates)
    • Create and edit profiles
    • Activate lower-roled users
    • Deactivate lower-roled users
    • Require lower-roled users to escrow their key
    • Delete lower-roled users
  • . Basic Team Interaction
    • View own teams
    • Edit own teams (depending on stature per-team)
  • . Team Administration
    • View all teams in the system
    • Add users to any team arbitrarily
  • . Basic Project Interaction
    • View projects they are a member of
    • View other members in projects they are a member of
  • . Project Management
    • Add users to projects they manage
    • Certify users for security requirements
  • . Basic Group Interaction
    • View groups they are a member of
    • View keys for groups they are a member of
    • Add users to groups they are a member of
  • . Basic VM Interaction
    • View drives (inconsistent, view notes)
    • View drive keys (necessary to share/attach)
    • View own VM configs and configs shared with them
    • View own VM username
    • View own VMs and VMs shared with them

View Other Users and Team Members in the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. View all users you have access to in the right panel.
info
  • Users with user roles can only view other users who are members of their teams.
  • Users with sub-admin roles and admin roles can view users of teams they manage.
  • Users with super-admin roles can view all users in the system.
note
  • You can use the search bar to find a user in the right panel.
  • All users from your team are automatically pinned up in the right panel.

Pin a User Key in the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Pin Key button next to the user you want to pin.
  4. View the user whose public key has been pinned.

Unpin a User Key in the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Unpin Key button next to the user you want to unpin.
  4. View the user whose public key has been unpinned.

View Details of a User in the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button.
  4. Select Open overlay.
info

You can also double-click the user's name to open the user overlay.

Onboard a User from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user you want to onboard.
  4. Select Onboard.
  5. In the pop-up, select the appropriate onboard template.
  6. Click Onboard.
info
  • You can onboard a user from the Vault to an inactive onboard template; however, changes will only take effect when the template becomes active or active and escrow on next login.
  • You can onboard a user to an onboard template even if they are not currently a member of the team, project or VM associated with that template. Doing so will automatically add the user to the onboarding template's team, project and VM.
Confirmations, Errors & Solutions
View More
User Onboarded
Onboarding user-name with onboarding-template-name total-time-to-onboard.
Failed to Apply User Profile & State to User
Failed to apply user profile: Cannot read properties of undefined (reading 'rank')
Set Static Profile in Onboarding Template
Ask your admin to select an existing profile in the onboarding template.

To Admin
To fix this error, follow the steps in Set the Profile of an Onboarding Template.
Failed to Apply User State to User
Failed to apply user state: No changes specified.
Update State in Onboarding Template
Ask your admin to set state to Active in the onboarding template.

To Admin
To fix this error, follow the steps in Change the State of an Onboarding Template.

Apply a Profile to a User from the Vault

Method one:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user for whom you want to apply a profile.
  4. Select Apply Profile.
  5. In the pop-up, select the appropriate profile.
  6. Click Apply.

Method two:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to apply profile to.
  4. In the new window, click the Profile section in the left panel.
  5. Select the appropriate profile from the list.
  6. Click Save at the top.
info

You must be a user with admin or super-admin roles to apply profiles.

Confirmations, Errors & Solutions
View More
Applied Profile to User
Apply profile-name to user-name total-time-to-apply-profile.
Applied Custom Profile to User From Overlay
You can now manage permissions manually.

Edit Metadata of a User from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user for whom you want to edit metadata.
  4. Select Edit metadata.
  5. In the pop-up, edit the first and last name, contact email, department and position.
  6. Click Save.
Confirmations, Errors & Solutions
View More
Updated Metadata of User
Update user-name's information total-time-to-update.
Failed to Update User Metadata
User must have a first name.
Enter User's First Name
You must enter the user's first name in the First Name field to proceed.
Failed to Update User Metadata
User must have a last name.
Enter User's Last Name
You must enter the user's last name in the Last Name field to proceed.

Change the State of a User from the Vault

Method one:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user whose state you want to change.
  4. Select Change State.
  5. In the pop-up, select between Inactive, Active or Active and escrow on next login.
  6. Click Deactivate, Activate or Require escrow as required.

Method two:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to change the state of.
  4. In the new window, click the State section in the left panel.
  5. Select between Inactive, Active or Active and escrow on next login.
  6. Click Save at the top.
Confirmations, Errors & Solutions
View More
Updated State of User
Updated user-name's state.
Login Failed Due to Inactive Account State
Login failed: admin-message-to-user-for-changing-account-state-to-inactive.
Ask Your Admin
Ask your admin to reactivate your account.

To Admin
To reactivate a user's account, follow the steps in Change State of User(s) from Management.

Change the Role of a User from the Vault

Method one:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user whose role you want to change.
  4. Select Change Role.
  5. In the pop-up, change the user's role to User, Sub-administrator, Administrator or Super-administrator.
  6. Click Promote or Demote as requested.

Method two:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to change roles.
  4. In the new window, click the Manual permission management section in the left panel.
  5. Click the Change Role button in the top right.
  6. In the pop-up, change the user's role to User, Sub-administrator, Administrator or Super-administrator.
  7. Click Promote or Demote as requested.
Confirmations, Errors & Solutions
View More
Promoted User Role
Promote user-name to a output-role total-time-to-promote.
Demoted User Role
Demote user-name to a output-role total-time-to-demote.
User Profile Overwritten User Role and Vice-Versa
The updated user profile overwrote the currently selected user role, and the updated user role overwrote the user profile.
Use Either User Profiles Or User Roles
Both user profiles and user roles provide permissions and access controls for users, but they achieve this through different mechanisms while serving the same purpose.

Add a User to Teams from the Vault

bulk-action

Method one:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user you want to add to team(s).
  4. Select Add to Team(s).
  5. In the pop-up, enter the team(s) to add the user to.
  6. Click Save.

Method two:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Double-click the user you wish to add to team(s).
  4. In the new window, click the Teams section in the left panel.
  5. Click Add to team(s) button in the top right panel.
  6. In the pop-up, enter the team(s) to add the user to.
  7. Click Save.
Confirmations, Errors & Solutions
View More
Added/Deleted Users to Teams
Add/delete user-name to total-teams-number teams total-time-to-add/delete.
Add to Team(s) Button Not Visible
You cannot view the Add to team(s) button next to user's options in the vault.
You Do Not Have Team Administration Permissions
You must ask your admin for team administration permissions in order to add, remove or modify teams from your vault.

To Admin
To allow team permissions to a user, follow the steps in Access the Users' Overlay then go to Manual permission management section.

Add a User to Projects from the Vault

bulk-action

Method one:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user you want to add to project(s).
  4. Select Add to project(s).
  5. In the pop-up, select the project to add user to, optional expiration date, their role, restrictions, and membership renewal in the project.
  6. Click Save.

Method two:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Double-click the user you wish to add to team(s).
  4. In the new window, click the Projects section in the left panel.
  5. Click Add to project(s) button in the top right panel.
  6. In the pop-up, select the project to add user to, optional expiration date, their role, restrictions, and membership renewal in the project.
  7. Click Save.
Confirmations, Errors & Solutions
View More
Added Users to Projects
Add user-name to project-name total-time-to-add.

Certify a User for a Project from the Vault

Method one:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user you want to certify.
  4. Select Add Certification.
  5. In the pop-up, enter the security requirement, the optional expiration date and renewal attempt.
  6. Click Certify.

Method two:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Double-click the user you wish to certify.
  4. In the new window, click the Certifications section in the left panel.
  5. Click Add a certificate button in the top right panel.
  6. In the pop-up, enter the security requirement, the optional expiration date and renewal attempt.
  7. Click Certify.
info
  • Setting a certification expiration date in the past will result in the certification being marked as expired.
  • Tick the Never expires box to make certificates active indefinitely.
Confirmations, Errors & Solutions
View More
Certified User
Certify user-name for security-requirement-name total-time-to-certify.
Unselected Requirement to Certify User
You must select a requirement.
Select a Requirement from List
In the Certify user-name prompt, select an existing security requirement in the first field.
Certifications Must Expire
Certifications for this requirement must expire.
Add Expiration Date
You must add an expiration date in the appropriate field when certifiying users for the specified security requirement.
Selected Past Date By Mistake
Certificate shows expired (red text) in Certifications user's overlay.
Ask Your Admin to Renew Expiration Date
Ask your admin to renew expiration date of the certificate for the user.

To Admin
To renew user's certification expiration date, follow the steps in Edit or Renew a User Certification.

Refresh a User's Information from the Vault

bulk-action

Method one:

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user whose information you want to refresh.
  4. Select Refresh user info.
  5. In the pop-up, click Refresh user info.

Method two:

  1. Go to the Vault icon in the top left panel.
  2. Click the Refresh button in the top right corner to refresh all users in the vault.
info

This action updates all user information with the same content to re-record their details in the audit log.

Confirmations, Errors & Solutions
View More
Refreshed User Information
Refresh user info for user-name total-time-to-certify.

Make an Announcement to a User from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user to whom you want to make an announcement.
  4. Select Make annonuncement.
  5. In the pop-up, enter the announcement message.
  6. Click Send.
info
  • This announcement will not be end-to-end encrypted.
  • Maximum announcement length is 250 characters.
Confirmations, Errors & Solutions
View More
Sent Message Confirmation
Message sent.
Did Not Enter Message
You must enter a message.
Enter a Message
In the Make an announcement prompt, enter a message for the selected user.

Bulk Email a User from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user you want to bulk email.
  4. Select Bulk email.
  5. In the pop-up, click Copy to copy the email or click Download to download the email.
  6. Once done, click Close.
Confirmations, Errors & Solutions
View More
Copied Email Successfully
Email list copied to the clipboard.

Delete a User from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the Open Full Menu button next to the user you want to delete.
  4. Select Delete.
  5. In the pop-up, click Delete user.
caution

Deleted users are removed from tiCrypt, however, deleted users may still be associated with teams, projects and own drives.

note

Deleted users will be stored in the Deleted Users section in management.

Confirmations, Errors & Solutions
View More
User Deleted
Deleted user-name.
User Still in Teams
User is still member of teams: team-name-1,team-name-2,team-name-3.
Ask Your Admin To Remove User From Teams
Ask your admin to remove the user from all existing teams for a clean removal.

To Admin
To delete a user from a team, follow the steps in Delete Team Membership(s)
Delete User Warning
Deleting the account removes the user from tiCrypt, but the user may still be associated with teams, projects, and own drives.
Ask Your Admin For Confirmation
Before attempting to delete a user associated with any teams, projects or drives, ask your admin for confirmation to delete them.

View Common Groups with a User from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to view common groups with.
  4. In the new window, click the Groups in common with you section in the left panel.
  5. View all groups you have in common with the user.

Add a User to Your Group from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to add to a group.
  4. In the new window, click the Groups in common with you section in the left panel.
  5. Click Add to one of your groups button in the top right panel.
  6. In the pop-up, select the group and user permissions within the group.
  7. Click Add to group.
Confirmations, Errors & Solutions
View More
User Added to Group
User user-name added to group group-name.
Did Not Select a Group
You must select a group from the autocomplete.
Select a Group
Select a group from the autocomplete list to proceed.

View the Virtual Machines Configurations Owned or Shared by the User in the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to view the virtual machines configurations of.
  4. In the new window, click the VM Configurations section in the left panel.
  5. View all virtual machines configurations of the user.
Confirmations, Errors & Solutions
View More
Cannot View Any VM
You cannot view any VM because the VMs you belong to are shared with you. Only the VMs you created or own/co-own will appear in this column.
Create or Co-Own a VM
Follow the process in Create a New Virtual Machine to create or ask co-ownership for a VM from your admin.

View the Running Virtual Machines a User Has Access to from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to view the running virtual machines of.
  4. In the new window, click the Running VMs section in the left panel.
  5. View all running virtual machines the user has access to.
note

The running VMs are shown specifically for the selected user. If you share your running VM with the user, but they are not running it locally, the VM will not be displayed in this list.

Confirmations, Errors & Solutions
View More
Cannot View Any Running VM
You cannot view any running VM because no VM is running for this user at the moment.
Turn On Existing VM
  1. In the Users right panel, click the user name to open overlay.
  2. Navigate to the VM Configurations section in the left panel.
  3. Select the VM configuration to turn on.
  4. Click the Open Full Menu button in the top right.
  5. Select Start.
To Admin
If the team associated with the drive is different than the team associated with the VM configuration, a new error will appear upon turning the VM configuration on as shown below.
Failed to Attach/Mount Home Drive
Failed to attach/mount home drive failed (will retry once): No key available for drive drive-id-name and user user-id-name.
Verify Team Match & Resource Allocation in VM & Drive
Make sure the VM configuration team and the drive team are the same. If either team has zero or limited quotas, it will impact the resources available for your drive and its associated VM configuration. Confirm that your team has sufficient resource allocation for both the VM configuration and the drive.

View Drives That a User Has Access to from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to view the drives of.
  4. In the new window, click the Drives section in the left panel.
  5. View all drives the user has access to.
Confirmations, Errors & Solutions
View More
Cannot View Any Drive
You cannot view any Drive because the Drives you belong to are shared with you. Only the Drives you created or own/co-own will appear in this column.
Create or Co-Own a Drive
Follow the process in Create a New Drive to create or ask co-ownership for a Drive from your admin.

View User Permissions from the Vault

  1. Go to the Vault icon in the top left panel.
  2. Click the Users card on the right panel.
  3. Click the user you wish to view permissions of.
  4. In the new window, click the Manual permission management section in the left panel.
  5. Tick or untick the appropriate permissions for the user in the system.
  6. Once done, click Save at the top.
danger

This action is restricted to admins. Changing permissions may result in unexpected failures for the user. Use with caution.

Confirmations, Errors & Solutions
View More
Cannot View User Permissions
You cannot view any user permissions because the user has a super-admin role.
Change User Role or Apply Custom Profile to User
To Admin