...
(One-time) Prepare the platform to verify new users
Create and register a new (external) Service
Invite external service users and
Preventrevoke access to AMPI and User Panel
Revoke AMPI access
Provide Service Panel access to the new external service users
...
There are two possible cases. As an admin you can invite external users, or external users can sign up themselves. In both casesFor the latter case, the Force Verify User setting should be enabled.
Case 1 - Org admin invites an external user
...
with delayed activation
| Info |
|---|
This method ensures that invited users at no point in time have access to the User Panel or AMPI. |
To perform the following steps access to both the Org panel and Admin panel is required.
...
In the Org panel - Invite the user
As an organization admin, go to the Org panel - Users
Select Invite User
Fill in the name and e-mail accordingly
Keep Deactivate Activate User enabled
Disable User Panel Access
Save
At this moment the external new user will receive an automatic e-mail to reset their password.
| Note |
|---|
Revoke AMPI access In most organizations new users will automatically be granted access to AMPI. Therefore, the newly invited external user will also have access to AMPI unless you revoke it immediately following the steps below. You can look up what AMPI default access group is configured for your organization at Home › B3_Organization › Organizations › <YOUR ORGANIZATION> |
...
In case the checkbox Activate User is deselected when inviting the user, the automatic email to set the password is not sent. Thus the new user is not informed automatically about the new account.
...
account will be created, but no automatic email is sent to the new user to inform about the account creation. This will give us time to revoke default permissions that may have been provided.
In the Admin panel - Revoke permissions
By default, most organizations will provide both AMPI and User Panel access
...
to newly created users. In this section, we are going to revoke those default permissions for Service users
To revoke permissions…
As an admin panel user, go to Home › the Admin panel
Navigate to Authentication and Authorization › Users
Find and open the user details of the external user you just invited
In the section To remove the User Panel access go to the USER ACCESS GROUPS, remove the access group(s) AMPI User (and AMPI Expert if assigned) by selecting the checkbox DELETE?
And clicking SAVE at the bottom of the screen
...
section
Select the DELETE? checkbox for any AMPI and/or User Panel permission
Confirm your changes by clicking Save and continue editing at the bottom of the page.
The permissions of the new user are set up correctly now. However, the user cannot log into the platform, yet.
In the Org panel - Activate the user
To enable the user to log into the platform, the user needs to be activated first.
As an organization admin, go to the Org panel - Users
Open the profile of the new user
Hit Send Activation which will trigger an automatic email to set the password for the new user.
...
Alternatively, the new user can also use the Forgot password? functionality to set a password
...
After a password has been set the external Service user can then log into the platform.
To complete the setup for the external service user, Service Panel access needs to be granted. For details, see below at https://3yourmind.atlassian.net/wiki/spaces/PD/pages/1845952516/Inviting+External+Suppliers+as+Printing+Service+Onto+Your+Platform#Providing-Service-Panel-access-to-new-external-users. It is not necessary to wait for the user to set a password first.
Case 2 - External user signs up
Actions performed by a new external user
...
An external user signs up on the platform
The external user receives an automatic email to set a password
The external user sets a password and needs to wait for activation of the account through an admin
Only after step 3, the user appears in the user list in the org panel and the admin panel.
...
To perform the following steps access to both the Org panel and Admin panel is required.
In the Admin panel - Revoke permissions
To revoke permissions you can follow the same steps outlined in Case 1 under “In the Admin panel - Revoke permissions”
...
In the Org panel - Verify user
After AMPI and UP permissions have been revoked, you can verify the user and thus grant access to the platform.
As an Org admin verify the new user to grant platform access
The new external user can now log into the platform and does not have access to AMPI or the User Panel.
In fact, the new user now does not have access to any panel, so Service Panel access needs to be granted in the next step. See below.
Providing Service Panel access to new external users
...