If a Login is what gives a person access to the ALP SaaS system, a User is how that person accesses an individual instance. The difference between a Login and a User is discussed in "Understanding Enterprise Administration and User Management."
Here, we will explore the process of adding users to an individual instance.
Before we begin, it's important to understand that only existing Users with a Security Role configured to add and edit System Users are able to add Users to an instance. If you want to add a new User to an instance, this work must be done by a User with System User management permissions enabled.
When you create a User, you'll select their permissions within the instance. Be sure to consider the Principle of Least Privilege throughout this process. A User only needs access to the ALP SaaS features required to get their job done.
How to Add a User
- As the User with System User management permissions, log into the instance where you want to add a new User.
- Navigate to System, User.
- Click Add Application User.
Here, you will find the User creation page. It requires a Name, Login Email or ID, and Security Role.
- Enter the User's Name.
- Enter the User's Login or ID.
If using Single Sign-On, enter the Login Email used by the user to access the ALP SaaS system, as discussed in "Understanding Enterprise Administration and User Management."
- Select the User's Security Role.
Keep the Principle of Least Privilege in mind with this option. A User only needs access to the ALP SaaS features required to get their job done.
- Select the User's Specific Security Settings.
This feature offers specific security settings for the new User when it comes to point adjustments, redeeming points, issuing manual transactions, issuing rewards and executing exports. Again, consider the Principle of Least Privilege when selecting security settings.
- Click Save Application User.
The User is now added to this individual instance. If you want this person to access other instances, you will need to move through the same steps on each instance.