> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fentufsm.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management

> Creating and managing system user accounts

<img src="https://mintcdn.com/fentu/hwQj1zN52k4D8yBe/images/fentu-fsm/administration/user-management-list.png?fit=max&auto=format&n=hwQj1zN52k4D8yBe&q=85&s=41c3329b5a81f95ab64070522f73ac0c" alt="User Management List View" width="1280" height="720" data-path="images/fentu-fsm/administration/user-management-list.png" />

## Overview

User Management controls who can access Fentu FSM and what they can do within the system. Each person who needs to log in requires a user account with appropriate permissions based on their role.

<Note>
  User accounts are separate from technician records. A technician needs both a technician profile (workforce data) and a user account (system access) to use the mobile app.
</Note>

## When to Manage Users

Access this module to:

* **Create Accounts** - Set up new users
* **Manage Permissions** - Control what users can access
* **Reset Passwords** - Help users who are locked out
* **Deactivate Accounts** - Remove access for departing employees
* **Audit Access** - Review who has access to what

***

## User Information

Each user account includes:

| Field            | Description                            |
| ---------------- | -------------------------------------- |
| **Username**     | Login identifier                       |
| **Email**        | Contact email (often used as username) |
| **Full Name**    | Display name                           |
| **Profile**      | Permission profile assigned            |
| **Branch**       | Associated branch                      |
| **Status**       | Active, Inactive, Locked               |
| **Last Login**   | Most recent access                     |
| **Created Date** | When account was created               |

### User Types

| Type              | Description           | Typical Access                     |
| ----------------- | --------------------- | ---------------------------------- |
| **Administrator** | System administrators | Full access to all features        |
| **Dispatcher**    | Service coordinators  | Work orders, scheduling, customers |
| **Technician**    | Field technicians     | Mobile app, assigned work          |
| **Manager**       | Team managers         | Team data, reports                 |
| **Accountant**    | Finance users         | Invoicing, financial reports       |
| **Read-Only**     | View-only access      | Reports and dashboards             |

***

## Creating Users

<Steps>
  <Step title="Navigate to User Management">
    Go to Administration > User Management
  </Step>

  <Step title="Click Create">
    Start a new user account
  </Step>

  <Step title="Enter User Details">
    Provide username, email, and name
  </Step>

  <Step title="Set Temporary Password">
    Create initial password (user should change on first login)
  </Step>

  <Step title="Assign Profile">
    Select the permission profile
  </Step>

  <Step title="Set Branch">
    Associate with appropriate branch
  </Step>

  <Step title="Link to Technician">
    If applicable, link to technician record
  </Step>

  <Step title="Save User">
    Create the account
  </Step>
</Steps>

### Linking Users to Technicians

For field technicians:

1. Create the user account first
2. Open the technician record
3. Link to the user account
4. Or select existing technician when creating user

<Warning>
  Users without technician links cannot be assigned work orders. Always link accounts for field personnel.
</Warning>

***

## Managing Permissions

### Through Profiles

Permissions are assigned via profiles:

* Each user gets one profile
* Profile determines accessible features
* Change profile to change permissions
* See [Profiles & Roles](/administration/users/profiles-roles) for details

### Data Access

Control what data users can see:

| Level        | Description                   |
| ------------ | ----------------------------- |
| **Global**   | All data across all branches  |
| **Branch**   | Only data for assigned branch |
| **Team**     | Only data for assigned team   |
| **Personal** | Only own records              |

<Info>
  Combine permission profiles with data access levels for granular control. A dispatcher profile with branch-level access sees all work orders but only for their branch.
</Info>

***

## Account Administration

### Password Management

| Action              | How                                           |
| ------------------- | --------------------------------------------- |
| **Reset Password**  | Admin sets new temporary password             |
| **Force Change**    | Require password change at next login         |
| **Unlock Account**  | Clear lockout after too many failed attempts  |
| **Password Policy** | Set minimum requirements (length, complexity) |

### Account Status

| Status       | Meaning                 | Action                       |
| ------------ | ----------------------- | ---------------------------- |
| **Active**   | Normal, can log in      | None needed                  |
| **Inactive** | Disabled, cannot log in | Reactivate to restore access |
| **Locked**   | Temporarily blocked     | Unlock to restore access     |
| **Pending**  | Awaiting first login    | User needs to set password   |

### Security Features

* **Session Timeout** - Automatic logout after inactivity
* **Login Attempts** - Lock after too many failures
* **Two-Factor Authentication** - Additional login verification
* **Password Expiration** - Force regular password changes

***

## Bulk Operations

### Importing Users

For multiple new users:

1. Prepare user data in spreadsheet
2. Use Import function
3. Map columns to user fields
4. Review and confirm import
5. Send welcome emails with credentials

### Exporting User List

Export user data for:

* Audit purposes
* Integration with HR systems
* Backup before changes
* Compliance reporting

***

## Best Practices

<AccordionGroup>
  <Accordion title="Unique Usernames" icon="user">
    Use email addresses as usernames when possible. They're unique and users remember them.
  </Accordion>

  <Accordion title="Minimum Permissions" icon="lock">
    Give users only the permissions they need. More access means more risk.
  </Accordion>

  <Accordion title="Regular Audits" icon="search">
    Periodically review user accounts. Remove or deactivate unused accounts.
  </Accordion>

  <Accordion title="Prompt Deactivation" icon="user-slash">
    Deactivate accounts immediately when employees leave. Don't wait for cleanup later.
  </Accordion>

  <Accordion title="Strong Passwords" icon="key">
    Enforce password complexity. Weak passwords are the most common security vulnerability.
  </Accordion>

  <Accordion title="Document Assignments" icon="file-alt">
    Keep records of why users have specific profiles. This helps with audits and reviews.
  </Accordion>
</AccordionGroup>

***

## Common Questions

<AccordionGroup>
  <Accordion title="What's the difference between user and technician?" icon="question">
    A user account provides system login access. A technician record contains workforce data. Field technicians need both.
  </Accordion>

  <Accordion title="Can one person have multiple user accounts?" icon="question">
    Generally no. One person should have one account. Use profiles to grant access to multiple areas.
  </Accordion>

  <Accordion title="How do I handle shared logins?" icon="question">
    Avoid shared logins. They prevent accountability tracking. Create individual accounts for each person.
  </Accordion>

  <Accordion title="What happens when an account is locked?" icon="question">
    The user cannot log in. An administrator must unlock it. This typically happens after too many failed login attempts.
  </Accordion>

  <Accordion title="Can users change their own email/username?" icon="question">
    Depending on configuration, users may update their email. Username changes usually require admin action.
  </Accordion>

  <Accordion title="How do I transfer work when someone leaves?" icon="question">
    Reassign open work orders before deactivating the account. The system may prevent deactivation with active assignments.
  </Accordion>
</AccordionGroup>

***

## Related Documentation

<CardGroup cols={2}>
  <Card title="Profiles & Roles" icon="shield-alt" href="/administration/users/profiles-roles">
    Permission configuration
  </Card>

  <Card title="Technicians" icon="user-gear" href="/workforce/technicians/technician-management">
    Technician management
  </Card>

  <Card title="System Settings" icon="cog" href="/administration/settings/system-settings">
    Security settings
  </Card>

  <Card title="Import" icon="upload" href="/administration/data/import">
    Bulk user import
  </Card>
</CardGroup>
