User Management

​

Overview

User Management allows administrators to create and manage user accounts for each client organization. Each client has their own set of users with specific roles that determine their permissions and access levels within the greenhouse monitoring system.

​

Accessing User Management

To manage users for a client:

1. Navigate to a client detail screen
2. Select the “Users” tab
3. View all users for this client organization

​

User Roles

The system supports three role types with different permission levels:

​

User Properties

Each user account has the following attributes:

​

Account Identifiers

• User Code: Unique system-generated identifier
• User ID: Internal database reference
• Client ID: The organization this user belongs to

​

Login Credentials

• Username: Login identifier (must be unique within the client)
• Email: Contact email address (must be valid format)
• Password: Encrypted authentication credential

​

Access Control

• Role: Admin, Operator, or Viewer
• Status: Active or Inactive

​

Activity Tracking

• Last Login: Timestamp of most recent login
• Created At: Account creation date
• Updated At: Last modification date

​

Creating a New User

Follow these steps to add a user to a client account:

​

Viewing User Information

The users table displays comprehensive account details:

​

Role Badges

Roles are displayed with distinct visual indicators:

Admin (Green Badge)

Users with full administrative privileges. Can manage all aspects of the client account including other users, greenhouses, devices, and settings.

Operator (Blue Badge)

Users with operational access. Can monitor conditions, control devices, and manage day-to-day greenhouse operations but have limited configuration access.

Viewer (Gray Badge)

Users with read-only access. Can view data, generate reports, and monitor status but cannot make changes or control devices.

​

Editing User Accounts

To update an existing user:

​

Changing User Passwords

Passwords can be updated when editing a user:

1. Open the edit dialog for the user
2. Enter a new password in the password field
3. Leave blank to keep the existing password unchanged
4. Save to update the password

​

Managing User Roles

​

Promoting a User

To give a user more permissions:

1. Edit the user account
2. Change role to a higher level:
   • Viewer → Operator (add control capabilities)
   • Operator → Admin (grant full administrative access)
   • Viewer → Admin (grant full access)
3. Save changes

​

Demoting a User

To restrict a user’s permissions:

1. Edit the user account
2. Change role to a lower level:
   • Admin → Operator (remove admin privileges)
   • Admin → Viewer (restrict to read-only)
   • Operator → Viewer (remove control capabilities)
3. Save changes

​

User Status Management

​

Active Users

Set accounts to Active when:

• The user needs access to the system
• The account is in good standing
• The user is part of the client’s team

Active users can:

• Log in to the system
• Access features based on their role
• Receive notifications and alerts

​

Inactive Users

Set accounts to Inactive when:

• The user has left the organization
• Account access should be temporarily suspended
• You want to preserve the account without allowing login

Inactive users:

• Cannot log in to the system
• Don’t receive notifications
• Are preserved in the database for audit trails
• Can be reactivated at any time

​

Deleting User Accounts

To permanently remove a user:

​

Last Login Tracking

The system tracks when each user last logged in:

• Recent Login: Shows timestamp of most recent login
• Never Logged In: Displays ”-” or “Never” for accounts that haven’t been used
• Monitoring: Helps identify inactive accounts or security concerns

​

Use Cases for Login Tracking

1. Security Audits: Identify accounts that haven’t been used in a long time
2. License Management: Find unused accounts to deactivate
3. User Engagement: See which users are actively using the system
4. Troubleshooting: Verify that users can successfully log in

​

Common Workflows

​

Onboarding a New Team Member

​

Offboarding a Team Member

​

Password Reset Request

​

Role Migration

Promoting an Operator to Admin:

1. Review the user’s performance and reliability
2. Edit the user account
3. Change role from Operator to Admin
4. Notify user of new permissions
5. Provide any additional training on admin features

Creating a Viewer Account for External Access:

1. Create new user with Viewer role
2. Use a descriptive username (e.g., “external.auditor”)
3. Set a strong password
4. Set to Active only when access is needed
5. Set to Inactive when access period ends

​

Best Practices

1. Principle of Least Privilege: Assign the minimum role needed for each user’s responsibilities
2. Strong Passwords: Require complex passwords with letters, numbers, and symbols
3. Regular Audits: Review user list quarterly to deactivate unused accounts
4. Role Clarity: Ensure users understand their role and permissions
5. Status Management: Promptly deactivate accounts when team members leave
6. Email Accuracy: Keep email addresses current for notifications and password resets
7. Username Standards: Use consistent username format (e.g., firstname.lastname)
8. Limit Admins: Only assign Admin role to trusted managers and IT staff

​

Security Considerations

​

Account Security Tips

• Unique Usernames: Don’t reuse usernames across different clients
• Password Complexity: Enforce strong password requirements
• Regular Reviews: Audit user accounts monthly for security
• Immediate Deactivation: Disable access immediately when users leave
• Separate Accounts: Don’t share login credentials between multiple people
• Monitor Last Login: Watch for suspicious login patterns

​

Integration with Other Features

User management integrates with:

• Authentication: Users log in with credentials to access the system
• Audit Trails: User actions are logged with username and timestamp
• Notifications: Users receive alerts based on their role and permissions
• Dashboard: User activity and statistics appear in admin reports
• Client Management: Users are scoped to specific client organizations