Please watch this video for an overview and example of creating an asset for iTwin IoT and adding users: Creating a New Project - Register Asset
Overview
After creating your iTwin IoT asset the next step of using iTwin IoT is to invite other users to access your asset and to have the ability to add other users as well.
iTwin IoT users have two levels of permissions: an organizational role that dictates the user's ability to access and create assets, and an asset-level role that determines the access permissions for individual assets. For a description of the organization roles, please navigate to the Organization Role Description section of this article. This article will cover adding users and setting up the organization-level roles.
This article will cover:
Adding a User to an Organization
This workflow is used to get users into your Organization so they can be added to iTwin IoT assets, submit ServiceNow cases, or access other Bentley products. This is mostly useful for adding any co-administrator or group-administrator for your Organization, so that they can also manage your iTwin IoT assets and add new users to your iTwin IoT asset. A group-admin cannot spin up new assets.
User must have an organization role that allows you to add users to the organization. Please read the Organization Role description section for more details.
If the user to be added to an project is external to your organization, please proceed to the Asset users and roles article.
1. Accessing Organization User Management- The Organization level user management portal can be accessed through the menu bar on the top right corner of the iTwin IoT Assets page shown above, and then clicking the "OrgUsers and roles" option.
Take care not to get lost on the Organization User Management page, it is best to only access this page via iTwin IoT and to not use any other features if you only intend to configure users for your Organization
The user will then be directed to the User Management page illustrated below. On this page you can add new users to your Organization and assign Organization-level roles to them. If you are the sole admin of the Organization then it is good practice to add a co-admin or group admin so they can manage the Organization with you. For a description of these Organization roles, please navigate to the Organization Role Description section of this article.
2. Add User- Once on the User Management page, click on the blue "Add Users" button on the right side of the screen. After clicking, a "Add Users" pop-up window will appear in the middle of the screen.
If a user has already been added to the Bentley IMS system but is not assigned to your Organization then you can "claim" the user and add them to your Organization
3. New User Configuration- Fill out the required fields within the new user window, and click "Save" to exit the user configuration or "Save & Add Another" to begin adding another user.
Organization Level Role Configuration
Once a user has been added to your organization, they can be given organization roles. For accessing the Organization User Management page, please read the section Adding a user to an Organization
1. User Selection- Within the User Management page, the user can scroll through the list or use the search bar to find the user they intend to modify roles for. Once the correct user is found use the check mark selection icon next to the user's name.
2. Modify Roles- After a user or users have been selected in the step above, the "Modify Roles" icon becomes visible. Click on this icon to open the popout window illustrated below.
3. Modify Roles Window- Select the Organization roles you would like the user to have by toggling the checkboxes in the window. When finished, click Submit.
Organization Role description
Account Administrator: Organization's primary administrator assigned to add users, modify the role(s) of all existing users, manage software licenses, create / edit / delete projects.
- Add users
- Approve User Registration requests (Pending Approvals)
- Add or modify email domains related to your organization (claim ownership & Auto-Approve)
- Modify roles of all users
- Assign users to groups
- Create groups
- Lock/Unlock user's Sign In access
- Remove users associated to your organization
- Manage projects
- Access to Subscription Analytics
- Access to Entitlement Management
- Approve the setup of a federation or standalone MFA
Co-Administrator: Administrator assigned to add users, modify the role(s) of existing users, manage software licenses, and create / edit / delete projects.
- Add users (except Account Administrators)
- Approve User Registration requests (Pending Approvals)
- Modify roles of all users (except Account Administrators)
- Assign users to groups
- Create groups
- Lock/Unlock user's Sign In access (except Account Administrators)
- Remove users associated to your organization (except Account Administrators)
- Manage projects
- Access to Subscription Analytics reporting
- Access to Entitlement Management license management
- Approve the setup of a federation or standalone MFA
Group Administrator: Manage all users
- Add users
- Assign users to group(s) all users
- Create groups
- Lock/Unlock user's Sign In access for all users
Related articles: