Skip to content

How do I create a new user in my organization?

New users are invited to the organization by email.

Before you start

You need the Organization administrator role in the organization, or the System administrator role.

Add a user

  1. Click the gear icon in the upper right-hand corner, select Organization management, and then click Users in the left menu. This shows the users of the organization you are currently in.
  2. Click Add user in the top right.
  3. Enter the new user's email address.

  4. Choose a role under Select user role (see Choose a role). If needed, also select Inherited to suborganizations (see Give a role in all suborganizations) or set Labels (see Limit the user to some assets).

    The Add user dialog with the Project manager role and Inherited to suborganizations selected

  5. Click Add user. Nanitor sends the user an invitation email (see Activate the account).

Choose a role

  • Organization administrators can manage organization-wide settings such as enabling and disabling features, creating API keys and setting organization policy. They are also able to add users to the organization they admin as well as view and manage all data and technical policy within their organization.
  • Project managers can manage issues, assets, projects and benchmarks within an organization, allowing them to set technical policy, adjust priority ratings, create issue exceptions, and organize issues into projects. They can also view all relevant data throughout the organization.
  • Team members can view all relevant data for an organization as well as being able to leave comments on issues, assets and projects, but have no edit access.
  • Auditors have read-only access to the organization's data.

System administrator, which you may see for some users in the list, is an instance-wide role. It is not granted in this dialog.

Give a role in all suborganizations

In a top-level organization, the dialog also shows Inherited to suborganizations. If you select it, the user automatically has the same role in all suborganizations of this organization, including suborganizations added later. Otherwise, their access is limited to this organization.

The checkbox is only shown when you are in a top-level organization. An Organization administrator can only select it if their own role is inherited to suborganizations. A System administrator can always select it. If you have just created a customer organization, Nanitor has switched you into it, so switch back to your own organization first. For how to set up organizations for customers, see Multi-Tenancy Options.

In the user list, the role is shown as, for example, "Project manager (inheritable)" in the parent organization and "Project manager (inherited)" in each suborganization.

The Users list of the parent organization, where the new user's role is shown as Project manager (inheritable)

Limit the user to some assets

For Project managers, Team members and Auditors, you can limit which assets the user can see. Under Scope restrictions, select one or more asset labels in Labels. The user then only sees assets with those labels.

The Add user dialog with the Team member role and the label scope set to Site Reykjavik

Labels shows All and cannot be changed for Organization administrators, or when Inherited to suborganizations is selected. For what a label scope does and does not limit, see Label scopes in the User Guide.

Activate the account

The invitation email contains an activation link. The user opens it, activates the account and sets a password. After logging in, the user is encouraged to enable MFA. Until the user accepts the invitation, the user list shows "Pending Activation" as their name.