SS> Security> Users

User Account Maintenance

Summary

The User Maintenance window is used to create users, add users to a user group (users can also be added to user groups in the User Group Maintenance window in SS> Security> User Groups), and update user information such as employee number and email address.

Once an account has been created, the system will generate a welcome email that includes the new user's User Name and a temporary password so the user can access the application.

Once user accounts have been created, menu and database security options can be set up on the user account (SS> Security> Menu Security and SS> Security> DB Security).

If you are creating a new user in order to update a user's email address, create the new user and then use the Transfer User Permissions tool (SS> Security> Transfer User Permissions) to expedite the process by transferring the menu security settings, database security settings, and user preferences from the old user to the new user. Click here for information on the Transfer User Permissions tool.

Click here for information on Cash Receipts module security.

Step by Step

2 Create a new user account.

The Active toggle will automatically be checked on all user accounts, as this is the default user status. Uncheck the toggle in deactivate the user.
- Deactivated users will be unable to log in to the application. When a deactivated user provides valid login credentials, a message will display explaining that the user has been deactivated and they should direct questions to the system administrator.
Enter a User Name for the user.

The user name can be up to 32 alphanumeric characters long.
The User Name field is not case sensitive. A user account set up as TOM is the same as a user account set up as tom.
Once a user name has been entered and the user saved, the User Name cannot be modified.

Enter a Description for the user account.

If the User Name field does not include the entire name of the user, you may want to enter the name of the user in the Description field. For example, Tom Smith.
The Description field can be up to 30 characters long.

Enter an Email Address for the user account. This is required field and will be used to sign in to Cirrus. Once the new user account is saved, the system will generate a welcome email that includes the new user's User Name and a temporary password so the user can access the application.
- The welcome email will not include password details for agencies using MFA/SSO.
Enter an Employee Number to associate the user account with a Payroll module employee record. This is currently only required if you use the Timesheets feature. Click here for and overview on the Timesheets process.
Check the Use Scheduling toggle to include the user in the Cirrus appointment scheduling system.
- When this toggle is checked, the new user will appear on the User Schedule Setup Maintenance window (SS> Maintenance> User Schedule). Here the user's availability can be set up so that the user can be included in the appointment scheduling process. Click here for information on the User Schedule Setup Maintenance window.
- This toggle is only active when the user is being initially created. In order to add a user to the appointment scheduling system after a user is created and saved, you must use the User Schedule Setup Maintenance window.
Check the Work Flow Admin toggle if the user should be set up as a work flow administrator.
- Work flow administrators are able to approve or reject ALL work flows assigned to other Cirrus users.
The Tableau Settings section displays for users in agencies that are using the Tableau-powered Springbrook Analytics reporting tool. Click here for information on Springbrook Analytics.
- Check the Tableau User toggle to enable access to the Tableau site.
- Check the User Can Publish toggle if the new Tableau user should have the permission to publish reports in Tableau.
- If a user is deactivated, both the Tableau User and User Can Publish toggles will be automatically unchecked.
The Multi-factor Authentication section displays for agencies using multi-factor authentication (MFA). This section is used by an agency administrator to check, update, and reset a user's MFA status.
- The Load Status button will check the MFA status of the selected user. Once that status is displayed, that status can be updated with the Opt In or Opt Out button.
  - Users that are members of multiple agencies cannot opt out of MFA.
- The Reset MFA button will reset the user's MFA account.
  - This option is useful in the event that a user cannot access the device they initially set up as their authentication device, such as a lost or replaced phone. The user will then need to go through the MFA setup process again.
- Because MFA provides an additional level of security for our partner agencies, Springbrook strongly recommends keeping MFA enabled for all users.
The User Group Selection section is used to assign the user to user groups.
- Check the toggle next to each user group the user should be assigned to.
- If a user is assigned to multiple user groups, the least restrictive security setting applies.
- Database security (SS> Security> DB Security) and menu security (SS> Security> Menu Security) set up on the user account will override security that is set up on the user group. The security set up on a user group will apply if security has not been explicitly set up on the user account. This allows you to attach a user to a user group and then customize the security for a single user.
- User groups are created and maintained on the User Group Maintenance screen (SS> Security> User Group). Click here for information on User Group Maintenance.
Click the Save button when complete to save the user account.