Description

Manage User Accounts List

Update User Form

Description

User Management in DEXIT

Overview

A user in DEXIT represents an individual person who has access to the program. Each user is defined by their login credentials and contact information, which enables secure authentication and communication for system functions like password resets and two-factor authentication.

User Management Interface

DEXIT provides a comprehensive yet intuitive user management system through two primary interfaces:

• Security Users Browse: The main user management screen displays all system users in a clean, organized table format showing User Login, User Name, Email, Phone, User Level, Default Rights, and Groups assignments. This browse interface allows administrators to quickly view all users at a glance and perform essential management functions through convenient action buttons including Insert, Copy, Change, and Delete operations. The interface also provides direct access to Groups management and includes validation indicators for verified email and phone contacts.

• Update User Form: When adding or modifying user accounts, DEXIT presents a user-friendly tabbed interface that organizes user information logically. The General tab contains all essential user details including login credentials, contact information, user level assignments, team memberships, and default rights configuration. Additional tabs for Security Questions and Other settings provide extended functionality while maintaining a clean, uncluttered interface.

User Account Components

• Every user account in DEXIT includes essential identification fields: a unique Login ID and Password for authentication, plus Email and Phone fields that facilitate secure communications for password reset procedures and secondary authentication methods. The system includes validation features to verify email addresses and phone numbers, ensuring reliable communication channels.

• Users can be assigned to multiple groups (displayed as "Teams" in the interface) for streamlined permission management, while also maintaining individual access rights that can override their group-level permissions when specific customization is required.

User Access Levels

DEXIT implements a six-tier user hierarchy system that provides granular control over system access:

• No Access - Users with no assigned access level cannot access the application.
• Guest - Functions similarly to an Operator but allows login without password requirements, suitable for temporary or limited access scenarios. Can be designated as a "Guest Account" through a simple checkbox option.
• Operator - Standard user level with restricted access as defined by Supervisors or Administrators. Can be assigned to groups and inherits group-based permissions.
• Supervisor - Enjoys comprehensive access to program functions and can assign rights to Operators and Groups. Cannot create, delete, or edit user accounts or groups.
• Administrator - Possesses complete system access including the ability to add, edit, and remove groups and users. Controls runtime DEXIT settings for their assigned company.
• SysAdmin - Maintains the highest level of access with control over all companies within the system. The initial system user must be a SysAdmin and cannot be deleted while other users exist.

Default Rights Configuration

The system automatically grants full access to SysAdmin, Administrator, and Supervisor users for functions appropriate to their level. Users with No Access level are completely restricted from application entry.

For Operator and Guest users, administrators can configure default access rights using three clearly labeled radio button options:

• All: Grants access to the entire program except where explicitly restricted
• Group: Inherits access permissions from assigned group memberships  
• None: Provides access only to explicitly assigned rights

Account Security Management

• User Lockout Protection: When users exceed the allowed number of incorrect password attempts, DEXIT temporarily or permanently locks their account. Temporary lockouts resolve automatically after a specified time period, while permanent lockouts require administrator intervention through the "Unlock User" button conveniently located on the Update User form.

• User Deletion: Rather than permanently removing user records (which would affect system logs and audit trails), DEXIT marks users as deleted. Deleted users cannot log in but remain visible in user lists for reference. Administrators can restore deleted users through management functions in the user interface.

Self-Registration Feature

• DEXIT supports user self-registration for web-based applications and hybrid desktop environments. This feature requires either SMS or Email functionality and works with Program Login or Windows Login authentication methods (not available with Active Directory).

• When users select the Register option on the login screen, they provide their desired Login ID, name, email address, and phone number. The system generates a temporary password and sends it via email or SMS, allowing immediate access upon completion.

Flexible Login Types

• While DEXIT can be configured for different authentication methods through Security Policies, individual users can be assigned specific login types that override the system default. This flexibility accommodates mixed environments where some users require Program Login access even when the system uses Active Directory authentication.

Example User Configuration

• User Login: admin
• User Name: admin  
• Email: admin@techcorp.com (with validation confirmed)
• Phone: 5551234567 (with validation confirmed)
• User Level: SysAdmin
• Teams: Maintenance
• Default Rights: Configured based on organizational requirements

The intuitive interface design ensures that even complex user management tasks can be completed efficiently while maintaining security and organizational standards.