...
There are two possible cases. As an admin you can invite external users, or external users can sign up themselves. In both casesFor the latter case, the Force Verify User setting should be enabled.
...
| Info |
|---|
This method ensures that invited users at no point in time have access to the User Panel or AMPI. However, an email must be sent to the new user manually to inform about account creation and password. |
To perform the following steps access to both the Org panel and Admin panel is required.
...
As an admin, go to the Admin panel
Navigate to Authentication and Authorization › Users
Find and open the user details of the external user you just invited
Under Permissions enabled the Active checkbox to activate the account
To remove the User Panel access go to the USER ACCESS GROUPS section
Select the DELETE? checkbox for any AMPI and/or User Panel permission
Confirm your changes by clicking Save and continue editing at the bottom of the page.
The permissions of the new user are set up correctly now. But However, the new user cannot log into the platform, yet, because the new account is still missing a password.
This can be solved in two ways
(Preferred) Inform the new user to use the Forgot password? functionality to set a password
...
Or set an initial password for the user manually in the admin panel
Open the Change password form for the newly created user
Enter a secure password and memorize/store it temporarily.
Share the password with the new user via a secure channel and ask the user to change their password upon first login.
E.g. use Bitwarden Send for transmitting the password.
The external Service user can now log into the platform. To complete the setup for the external service user, Service Panel access needs to be granted. For details, see below at https://3yourmind.atlassian.net/wiki/spaces/PD/pages/1845952516/Inviting+External+Suppliers+as+Printing+Service+Onto+Your+Platform#Providing-Service-Panel-access-to-new-external-users.
Case 2 - Org admin invites an external user with instant activation
| Info |
|---|
This method requires no manual interaction with external service users as they are informed about account creation manually. However, there is a small time window between account creation and revoking of permission where the new user could potentially access User Panel and AMPI. |
To perform the following steps access to both the Org panel and Admin panel is required.
...
In the Org panel - Invite the user
.
In the Org panel - Activate the user
To enable the user to log into the platform, the user needs to be activated first.
As an organization admin, go to the Org panel - Users
Select Invite User
Fill in the name and e-mail accordingly
Keep Activate User enabled
Save
At this moment the external user will receive an automatic e-mail to reset their password and be able to log into the platform.
In the Admin panel - Revoke permissions
You should revoke UP and AMPI permissions directly after sending the invitation to keep the time window of logging into the platform with additional permissions minimal.
To revoke permissions you can follow the same steps outlined in Case 1 under “In the Admin panel - Revoke permissions”.
...
Open the profile of the new user
Hit Send Activation which will trigger an automatic email to set the password for the new user.
...
Alternatively, the new user can also use the Forgot password? functionality to set a password
...
After a password has been set the external Service user can then log into the platform.
To complete the setup for the external service user, Service Panel access needs to be granted. For details, see below at https://3yourmind.atlassian.net/wiki/spaces/PD/pages/1845952516/Inviting+External+Suppliers+as+Printing+Service+Onto+Your+Platform#Providing-Service-Panel-access-to-new-external-users. It is not necessary to wait for the user to set a password first.
Case
...
2 - External user signs up
Actions performed by a new external user
...
In the Org panel - Verify user
After AMPI and UP permissions have been revoked, you can verify the user and thus grant access to the platform.
As an Org admin verify the new user to grant platform access
...