Create, edit, or delete a user in a single-tenant environment
You can create users directly in ThoughtSpot, or import users and user groups through SAML or similar protocols.
For users who have access through SAML, the SAML installation manages all user information.
|
This article contains instructions for managing users if your company does NOT use Identity and Access Management V2 (IAMv2). IAMv2 is off by default. If the Users section of the Admin Console does not contain an Account Activation column, your company is not using IAMv2. If the Users section of the Admin Console contains an Account Activation column, your company is using IAMv2. Refer to Create, edit, or delete a user using IAMv2. |
|
This article contains instructions for managing users in a single tenant environment. If you do not have an Org switcher between the help icon and the Search answers and Liveboards search box, your company is in a single tenant environment. If your company uses the Orgs feature for multi-tenancy in ThoughtSpot, you can see an Org switcher to the left of the help icon in the top navigation bar. Refer to Create, edit, or delete a user in a multi-tenant environment. If you are using Multi-tenancy with Orgs, we do not currently support using IAMv2. |
Create a user in ThoughtSpot
This procedure demonstrates how to create a user manually. When you create a user, you can specify the username, display name, sharing visibility, the password, email, whether they get a welcome email and its text, and assign group memberships. The user inherits privileges and permissions directly from the group assignments.
Note that all users automatically belong to the group All.
To create a new user and assign that user to groups, follow these steps:
-
Navigate to the Admin Console by selecting on the Admin tab from the top navigation bar.
-
Select Users from the side navigation bar that appears.
-
Select the + Add User button on the upper-left side of the list of users.
-
In the Add a new user interface, enter the details for the new user:
- Username
-
A login name for the user. Usernames must be unique and lowercase. If you are using Active Directory to authenticate users, and your LDAP configuration requires users to be created manually (they are not created automatically in ThoughtSpot upon authentication), the username you specify has to be domain-qualified (
username@ldap.thoughtspot.com), and you must enter a dummy password.
- Display name
-
A unique name for the user (usually their first and last name).
- Change password
-
Add or change the password. Your password must meet the following requirements:
-
The password must be 8 characters or more in length.
-
The password must include at least 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character.
-
The password must pass a complexity test based on an external library. This test ensures password complexity and uniqueness by checking for known patterns or words that are too simple. If the password is not complex enough, ThoughtSpot rejects it, even if it fulfills the other requirements. Refer to the Dropbox password library for more information.
-
The password cannot use certain blocked words. By default, the blocked words are: your username, any part of your display name, and any blocked words your company configures. To add additional words to the blocklist, contact ThoughtSpot Support.
-
- Confirm password
-
Enter the password again.
-
The user’s email address. ThoughtSpot uses this for notification when another user shares something with them, for onboarding, and others.
During cluster configuration, the administrator specifies the email server domain. ThoughtSpot does not accept emails outside this domain. Contact ThoughtSpot Support to add new domains to a list of allowed domains.
- Send a welcome email
-
(Optional) When checked, this option ensures that the new user receives a welcome email. You can customize other aspects of the onboarding email, such as the email address ThoughtSpot sends it from, from the Onboarding section of the Admin Console. Refer to Managing email and onboarding settings.
- Email message text
-
(Optional) Enter text of the optional welcome email here.
- Groups
-
(Recommended) Select the groups for the user.
When you create a new user, the groups they belong to define the following attributes for the user:
- Privileges
-
the actions they can perform, defined when you add a group and set security privileges
- Permissions
-
the data they can access and view, defined when you consider data security
Administrators can see all data sources, and row-level security does not apply to them.
If you add the user to a group that has the privilege Has administration privileges, they can see all the data in ThoughtSpot.
-
Select Add to create the user.
Note that this process of identifying the user’s needs contributes to a robust onboarding process. See Onboarding users.
Edit an existing user
As an administrator, you can edit a user account, and change the user’s groups. You can also help users by resetting their password, and evaluating their onboarding experience to ensure they receive the best possible introduction to relevant information in ThoughtSpot.
To edit an existing user, follow these steps:
-
Navigate to the Admin Console by selecting on the Admin tab from the top navigation bar.
-
Select Users from the side navigation bar that appears.
-
Select the username in the list to open the Edit User interface.
If you don’t immediately see the username you plan to edit, try searching for it.
-
In the Edit User interface, edit the basic user information.
You can change the username, display name, sharing visibility, passwords, and user’s email.
You can also preview onboarding, and make changes to the Groups assigned to the user.
-
Select Update.
Preview onboarding
While editing a user, select Preview business user onboarding to evaluate this user’s first experience with ThoughtSpot. After previewing the user’s default data source, you may choose to change the Group assignments.
Groups
Follow these steps to change the user’s groups:
-
In the Edit User interface, select the Groups tab.
-
Select the groups you want to add in the list by clicking the box next to the group name.
-
You can also use Search to find groups by name.
-
Deselect the groups you want to remove from the list by clearing the box next to the group name.
-
Select Update to save changes.
Delete users
To delete users, follow these steps:
-
Navigate to the Admin Console by selecting on the Admin tab from the top navigation bar.
-
Select Users from the side navigation bar that appears.
-
Select the users you plan to delete by clicking the box next to the username.
If you don’t immediately see the username you plan to delete, try searching for it.
-
Select Delete in the upper-left corner.
