Create, edit, or delete a user using IAMv2

This article contains instructions for managing users if your company uses Identity and Access Management V2 (IAMv2). IAMv2 is in Beta and off by default in 8.7.0.cl. If the Users section of the Admin Console contains an Account Activation column, your company is using IAMv2.

If the Users section of the Admin Console does not contain an Account Activation column, your company is not using IAMv2. Refer to Create, edit, or delete a user.

You can create users directly in ThoughtSpot, or import users and user groups through SAML or similar protocols.

For users who have access through SAML, the SAML installation manages all user information.

Create a user in ThoughtSpot

This procedure demonstrates how to create a user manually. When you create a user, you can specify the username, display name, sharing visibility, and email, and assign group memberships. The user inherits privileges and permissions directly from the group assignments.

Note that all users automatically belong to the group All.

To create a new user and assign that user to groups, follow these steps:

  1. Navigate to the Admin Console by clicking on the Admin tab from the top navigation bar.

  2. Select Users from the side navigation bar that appears.

    Admin Console - Users
  3. Click the + Add User button on the upper left-hand side of the list of users.

  4. In the Add a new user interface, enter the details for the new user. Note that the user creates their password as part of the activation process.

    Add a new User
    Username

    A login name for the user. Usernames must be unique and lowercase. If you are using Active Directory to authenticate users, and your LDAP configuration requires users to be created manually (they are not created automatically in ThoughtSpot upon authentication), the username you specify has to be domain-qualified (username@ldap.thoughtspot.com), and you must enter a dummy password.

    Display name

    A unique name for the user (usually their first and last name).

    Sharing visibility

    Indicate whether objects can be shared with this user. When set to SHARABLE, this user is an option in the Share dialog.

    Email

    The user’s email address. ThoughtSpot uses this for notification when another user shares something with them, for onboarding, and others.

    During cluster configuration, the administrator specifies the email server domain. ThoughtSpot does not accept emails outside this domain. Contact ThoughtSpot Support to add new domains to a list of allowed domains.
    Groups

    (Recommended) Select the groups for the user.

    When you create a new user, the groups they belong to define the following attributes for the user:

    Privileges

    the actions they can perform, defined when you Add a group and set security privileges

    Permissions

    the data they can access and view, defined when you consider Data security

    Administrators can see all data sources, and Row level security does not apply to them.

    If you add the user to a group that has the privilege Has administration privileges, they can see all the data in ThoughtSpot.
  5. Click ADD to create the user.

Note that this process of identifying the user’s needs contributes to a robust onboarding process. See Onboarding users.

Edit an existing user

As an administrator, you can edit a user account, and change the user’s groups. You can also help users by evaluating their onboarding experience to ensure they receive the best possible introduction to relevant information in ThoughtSpot.

To edit an existing user, follow these steps:

  1. Navigate to the Admin Console by clicking on the Admin tab from the top navigation bar.

  2. Select Users from the side navigation bar that appears.

    Admin Console - Users
  3. To open the Edit User interface, select the username for the user you would like to edit.

    If you don’t immediately see the username you plan to edit, use the search bar in the upper right corner of the Admin Console.

  4. In the Edit User interface, edit the basic user information.

    You can also Preview onboarding, and make changes to the Groups assigned to the user.

  5. Click Update.

Preview onboarding

You can click Preview onboarding to evaluate this user’s first experience with ThoughtSpot. After previewing the user’s default data source and Liveboards, you may choose to change the Group assignments.

Groups

Follow these steps to change the user’s groups:

  1. Click the Groups tab.

  2. Select the groups you want to add in the list by clicking the box next to the group name.

  3. You can also use Search to find groups by name.

  4. Deselect the groups you want to remove from the list by clearing the box next to the group name.

  5. Click Update to save changes.

Manage activation status

You can view the activation status of users created in ThoughtSpot, and resend the activation email to users who are not yet active.

The Account Activation column in the Users page of the Admin Console tells you the status of your users. If a user received the activation email, set up their account, and logged in to ThoughtSpot at least once, their status in Account Activation is ACTIVE. If a user received the activation email but did not yet set up their account, their status is PENDING.

If a user’s status is PENDING, you can send them the activation email again. Use this feature if the activation link in their original email expires. In the Account Activation column for the user, select Resend activation email.

Delete users

To delete users, follow these steps:

  1. Navigate to the Admin Console by clicking on the Admin tab from the top navigation bar.

  2. Select Users from the side navigation bar that appears.

    Admin Console - Users
  3. Select the users you plan to delete by clicking the box next to the username.

    If you don’t immediately see the username you plan to delete, use the search bar in the upper right corner of the Admin Console.

  4. Click Delete in the upper left-hand corner.