Manually Create Site Users

Ensure that the Site End Administrator User has set up the Organization Key before proceeding. The user will show with their Status as Active in the Active Site Users list if they have activated their account, during which the Organization Key will have been defined.

If the user is created by the MSP, they will need to have been provided with the Organization Key, as defined by the Site End Administrator User, in advance or they will not be permitted to complete the activation. If the User is created by the Site End Administrator User, the Organization Key will be embedded in the activation link but should still be provided as a precaution or if cookies have been blocked.

Once the Site End Administrator User has set up the Organization Key, you or the Site End Administrator User can create Site Users.

Navigate to User Management > Site Users
Click the + New User button
Enter the Site User's details, including which Client they require access to
Set the User Permission Level to Site User, or Site User - Limited (see below tables for permission level details)
Click Create once the Site User details and settings are complete - the user will now receive an activation email

Site User Permission Levels

Select from the below Site User Levels. These are uneditable and no custom Site User Permission Levels can be created.

Default Permission Levels

Description

Site Administrator

This is permission level is only available for client-based users, unlocked through the Site feature. This allows the Site based user to fully manage their organization.

This permission level also includes a built-in override, and users with this level cannot get locked out of passwords, clients or areas of Passportal, or via Security Groups.

Included Permissions

Admin: Export Data	Admin: Manage User Lockouts	Credential Types: Add/Edit	Domain: View
Domain: Add/Edit	Domain: Disable	Edit Access Assignments	Folder: Add/Edit
Import Data	Password: Add	Password: Edit	Password: Archive
Password: Clear Flags	Password: View	Password: TOTP Add/Remove	Permission Share
Permissions: Add	Permissions: Delete	Permissions: Edit	Permissions: View
Plugin Access	Report: Changed Passwords	Report: Client Audit Log	Report: Passportal Logins
Report: Password Audit by User	Report: Password Complexity	Report: Passwords Input by User	Report: Passwords Known by User
Report: Recently Run Reports	Report: Unchanged Passwords	Security Groups: Manage	Site Administrator
Site User: Add	Site User: Disable	Site User: Edit	SSL: Add/Edit
SSL: Disable	SSL: View	User: Add	User: Disable
User: Edit	Vault Access

Site User

This permission level is only available for Site based users, unlocked through the Site feature. This is for a regular Site based user, giving them capabilities to access and use their passwords, but no control over settings or managing their own organization.

Site User - Limited

This limited permission level is only available for Site based users, unlocked through the Site feature. This is for a regular Site based user, giving them capabilities to access and use their passwords, but no control over settings or managing their own organization.

Permissions Details

Permission	Description
Admin: Export Data	Grants the ability to export all passwords, clients and/or users in a CSV file format.
Admin: Manage User Lockouts	Grants the ability for an admin to receive and handle user lockout incidences.
Credential Types: Add/Edit	Grants the ability to add and remove custom credential types.
Domain: Add/Edit	Grants the ability to add or edit domain assets
Domain: Disable	Grants the ability to disable domain assets
Domain: View	Grants the ability to view only
Domain: View Logs	Grants the ability to view change and access logs
Edit Access Assignments	Grants the ability for an admin to assign a user access to a client.
Folder: Add/Edit	Grants the ability to create/edit folders.
Import Data	Grants the ability to use the CSV import templates to bulk add passwords, clients and/or users.
Password: Add	Grants ability to control who can create new passwords.
Password: Archive	Grants the ability to disable existing passwords.
Password: Clear Flags	Grants the ability to reset password flags for flagged passwords.
Password: Edit	Grants the ability to edit and modify existing passwords.
Password: View	Grants the ability to view passwords.
Password: TOTP Add/Remove	Grant the ability to add/remove TOTP
Permissions: Add	Grants the ability to create custom permission levels.
Permissions: Delete	Grants the ability to delete existing permission levels.
Permissions: Edit	Grants the ability to modify existing custom permission levels as well as the ability to assign permission levels to users.
Permission: Share	Grants the ability to share passwords with client based users.
Permissions: View	Grants the ability to view the permission levels.
Plugin Access	Grants the ability to use Passportal plug-ins such as browser extensions, and RMM plugins.
Report: Changed Passwords	Grants the ability to view which passwords were changed over a given date range via this report.
Report: Client Audit Log	Grants the ability to view all activities performed for a client(s) over a given date range via this report.
Report: Passportal Logins	Grants the ability to view all logins for a user(s) at your organization over a given date range via this report.
Report: Password Audit by User	Grants the ability to view all activities performed by a user(s) over a given date range via this report.
Report: Password Complexity	Grants ability to audit the strength and complexity of passwords via this report.
Report: Passwords Input by User	Grants the ability to view which current passwords were input by a given user/users via this report.
Report: Passwords Known by User	Grants the ability to view all passwords known by a user(s) for their entire lifespan using Passportal via this report.
Report: Recently Run Reports	Grants the ability to view and re-run previously run reports.
Report: Unchanged Passwords	Grants the ability to view what passwords have not been changed after a chosen date via this report.
Security Groups: Manage	Grants the ability to edit all security groups
Site User: Add	Grants the ability to add site users
Site User: Disable	Grants the ability to disable site users
Site User: Edit	Grants the ability to edit existing site users
SSL: Add/Edit	Grants the ability to add or edit SSL certifications
SSL: Disable	Grants the ability to disable SSL certifications
SSL: View	Grants the ability to view only SSL certifications
SSL: View Logs	Grants the ability to view access logs for SSL certifications
User: Add	Grants the ability to create new users
User: Disable	Grants the ability to disable existing users.
User: Edit	Grants the ability to edit existing users.
Vault Access	Give the user a My Vault section