---
title: Users
id: "en:accounts:ROOT:users.adoc"
site: en
component: accounts
module: ROOT
version: 3.0
lang: en
url: "https://help.rtlscloud.io/en/accounts/3.0/users.html"
source_repo: "https://github.com/iot-invent/xCloud.git@3.0.x"
source_path: accounts/docs/en/modules/ROOT/pages/users.adoc
---

# Users

The users of the tenant and the invitations they arrive through. Both live in the same view, switched with the two tabs at the top.

## User list

![Users](_images/view/users.webp)

The list shows the accounts that hold permissions in the current tenant. A user with permissions in several tenants appears in each of them.

An invited user appears only once their invitation has been accepted and fully processed. Until then they are listed under [Invitations](#_invitations).

### Action bar

| Action | Description |
| --- | --- |
| ![refresh](_images/refresh.svg) **Refresh** | Reloads the list. |
| ![plus](_images/plus.svg) **Add** | Opens the invitation wizard, see [Inviting rather than creating](#_inviting_rather_than_creating). |
| ![edit](_images/edit.svg) **Edit** | Opens the selected account. Which fields are editable depends on your own role. |
| ![delete](_images/delete.svg) **Remove from tenant** | Revokes every permission the account holds in this tenant. The account itself remains and is merely no longer shown here. |
| ![menu](_images/menu.svg) **More options** | Gives access to further administrative functions. |

### Columns

| Column | Description |
| --- | --- |
| **User name** | The identifier the account signs in with — the user’s e-mail address. |
| **Last name** | The family name. The arrow indicates the current sorting. |
| **First name** | The given name. |
| **E-mail** | The address on file. |
| **Active** | An `X` marks an enabled account. A disabled account cannot sign in. |

> **TIP:** Clicking a column heading sorts the list by it.

## Invitations

The second tab shows the invitations that are still open. Accepted and revoked invitations disappear from the list.

![Invitations](_images/view/users_invitations.webp)

### Action bar

There is no **Add** and no **Edit** here — an invitation is created in the wizard and not changed afterwards.

| Action | Description |
| --- | --- |
| ![refresh](_images/refresh.svg) **Refresh** | Reloads the list. |
| ![delete](_images/delete.svg) **Revoke** | Withdraws the invitation. The link becomes unusable. |
| **Resend invitation** | Sends the invitation to the same address again. |
| ![menu](_images/menu.svg) **More options** | The context menu of a row also holds **Copy invitation link**. |

### Columns

| Column | Description |
| --- | --- |
| **Last name** | The family name of the invited person. |
| **First name** | Their given name. |
| **E-mail** | The address the invitation was sent to. It is the key: an invitation to an address that already has an account extends that account’s permissions instead of creating a second one. |

## Inviting rather than creating

A user is not created, it is invited. The ![plus](_images/plus.svg) button therefore does not open a create dialog but the wizard for an invitation. That is not a detour but the only way: an account comes into being when the invited person accepts.

Hence the order that surprises the first time:

1.  You invite, and while doing so you decide which permissions the account is to receive.

2.  The invited person accepts — now the account exists.

3.  Only once they have also set up their profile and password are the permissions granted and the account appears in the user list.

Further permissions are granted later not through a new invitation but through [Permissions](permissions.md) or a [group](groups.md).

### The invitation dialog

![Invitation dialog](_images/view/users_invite.webp)

| Field | Mandatory | Description |
| --- | --- | --- |
| First name | yes | Given name of the invited person. |
| Last name | yes | Their family name. |
| E-mail | yes | The address the invitation is sent to. It also becomes the user name. |
| Tenant | yes | Prefilled with the current tenant and then not editable. |
| Space | no | Without a space the invitation applies to the tenant, with one only to that space. |
| Role | yes, unless a group | The selection follows the space: without a space the tenant-level roles, with a space those of the space, see [Roles](roles.md). |
| Group | yes, unless a role | Instead of a role: the invited person becomes a member of this group and receives its permissions. |
| Additional message | no | Free text carried into the invitation. |

**Role or group — one of the two has to be set.** The wizard does not allow an invitation without any permission, because it would produce an account that can see nothing.

**Finish** sends the invitation as an e-mail to the given address.