Configure Roles and Invite Users

Role creation

Before inviting users, administrators should establish roles that align with organizational needs. When inviting users to the dashboard, each user must be assigned a role. Roles are predefined sets of permissions that determine what actions a user can perform and what information they can access within the dashboard. Assigning the correct role to each user is important to maintaining security, efficiency, and compliance within your organization.

Permission Levels

Permissions are structured hierarchically, ranging from basic access (like viewing data) to advanced controls (such as managing settings or accessing sensitive information). Assigning higher roles with broader permissions should be limited to users who require them due to the potential impact on system operations.

Role Assignment

During the user invitation process, the administrator assigns a role to the user based on their responsibilities. This assignment automatically grants the appropriate permissions, ensuring that the user only has access to the tools and data they need.

Setting up Roles and Permissions

Before setting up the roles and permissions, we recommend reading the Best practice section further below.

1. Navigate to the Atlar dashboard -> User management -> Roles
2. Click on create new in the top right corner to start defining a new role
3. Define role permissions
   1. This can either be done in Advanced setup or Simple setup. Read more about the terminology for the permissions under Key concepts. Remember to only give the necessary permissions for the role (the Principle of Least privilege)
   2. If Select accounts is available in the bottom right corner, continue to step 4
   3. If See role summary is available in the bottom right corner, continue to step 5
4. Select accounts
   1. If the user should have access to all current and future accounts/entities, select All future entities
   2. If the user should have access to certain accounts/entities, deselect All future entities and select the specific accounts
5. Complete the Role Setup
   1. Review the role configuration
   2. Assign a descriptive name to the role, such as Accounting, Approver etc, to easily identify its purpose.
   3. Click Create to finalize the role creation.

The role is now created and users associated with the role can be invited to the platform.

Invite regular users

1. Navigate to the Atlar Dashboard -> User Management -> Users
2. In the top right corner, click Actions -> Invite Users
3. Invite one or multiple users at once, especially if they share the same role, by adding the users organization email address
4. Assign the appropriate role to the user(s) you are inviting
5. Click Create

Invited users will receive a notification to sign up for the Atlar platform.

• Track users pending verification under User Management -> Users -> Invited.
• View all users who have signed up to the platform under User Management -> Users -> All Users.

Best practice

Regular users

For regular users that you invite to join the production organization, the Principle of Least privilege should be followed – a user should only be able to access the information and resources that are necessary for its purpose. The following practices are recommended:

• Even if you’re the one setting up the organization, i.e. the owner, set up a dedicated personal account with access for your day-to-day tasks
• Enable/require Single Sign-On (SSO) for all members.
• Enable/require Multi-Factor Authentication (MFA) for all members. It's recommended to have at least one backup MFA option.
• Add Atlar to your own company’s offboarding-checklist