User Management

On the Users page, you can add and manage Gallery users. Manage user permissions in the user's profile and their assigned Subscription (Studio).

To manage users, select Users on the Admin toolbar.

The Users page displays a user grid of your current users. The information and options available in the user grid vary based on the Gallery's authentication method. 

Create a New User

1. On the Users page, select the plus icon to add a new user.  
   
2. Enter the user's first name in the First Name field.
3. Enter the user's last name in the Last Name field.
4. Enter a valid email address in the Email field. The user will receive notifications at the address.
5. Complete any additional user info fields you want to populate.
6. Select a Role. 
7. Select Yes for Can Schedule to allow the user to schedule workflows to run at a scheduled time. Note, workflow scheduling must also be enabled on the Jobs page in order for a user to be able to schedule jobs.
8. Select Yes for Can Prioritize to allow the user to prioritize a job. When there are multiple jobs in the queue, the job with the highest priority will run first.
9. Select Yes for Can Tag Jobs to allow the user to assign a specific worker to run a workflow.
10. Select Yes for Can Create Collections to allow the user to create Collections to share workflows. 
11. (Optional) In Subscription Id, enter a Studio Subscription Key. If left blank, the user will be assigned their own Private Studio. If you want to have the user share a Studio with another user, paste the corresponding Subscription Key.
12. If you disabled the Gallery Sign Up form, enter a password for the user in the Password and the Re-enter Password fields.
13. Select Save.

The new user is added to the Users page. The user's name, email address (for built-in authentication), Role, assigned Studio, Collection Count, and Join Date display in the user list. 

Edit a User

1. Select a user.
2. The following user info and permissions can be changed:
   • Select a Role. 
   • Enter a First Name.
   • Enter a Last Name.
   • Copy and paste the Subscription Id for a Subscription (Studio) in the Subscription Id field.
   • Select Yes or No for the Schedule Jobs setting to give or revoke permission to schedule jobs.
   • Select Yes or No for the Prioritize Jobs setting to give or revoke permission to prioritize jobs.
   • Select Yes or No for the Assign Jobs setting to give or revoke permission to assign jobs.
   • Select Yes or No for the Create Collections setting to give or revoke permission to create collections jobs.
   • Select No for the Active setting to deactivate a user's account.
   • Select Reset Password to reset the user's password. See Reset a User's Password for more information.
3. Click Save.

Deactivate a User

To revoke a user's access to Gallery, deactivate their user account. You can't delete a Gallery user's account. To deactivate a user, select the user and Select No for the Active setting.

User Roles

Gallery users can have one of the following roles. Roles determine the user's level of access.

• Curator: Curators (Gallery Admins) can access the Admin interface to perform administrative tasks. Curators also have all the privileges of an Artisan.
• Artisan: Artisans can publish, run, and share workflows in their Private Studio and shared Collections. 
• Member: Members can run workflows that are shared with them via Collections. 
• Viewer: Viewers can run public workflows on the homepage and in Districts.
• No Access: Blocks access to all Gallery assets. The No Access role is typically used in Galleries using either Integrated Windows Authentication or SAML Authentication to control initial access to the Gallery when new users sign up.
• Default: Assumes the default user role. See Set a Default User Role for more info. 

Set a Default User Role

The default user role is set to Viewer by default. You can change the default role using the dropdown in the top-right of the user grid. Any users with the Role value Default will assume the default user role. 

Set a Group Role

In Galleries using Integrated Windows Authentication roles can be assigned at a group level.

1. On the Users page, select the Groups tab.
2. Select the plus icon to add a new group.
3. Enter the group name as defined in Windows Active Directory in Search Groups. 
4. Select the group when it appears. 
5. Select OK.
6. Select a Role for the group.

Understanding Role Hierarchy

A user's role and their resulting Gallery access can come from one of three places, user role, group role (for Galleries using Integrated Windows Authentication), and default role. Roles are evaluated in this order: user role, group role, default role. Users' access resolves to the most specific role assignment. So, if a user's role assignment is any role other than Default, that is their role and corresponding access. If a user's role is Default, then the Gallery looks to see if they are in a group. If the user is in a group, they assume the group role. If they are not in a group they assume the default role. 

Reset a User's Password

1. Select the user.
2. On the Edit User page, select Reset Password.
3. Select OK. 

The user receives an email with a link to reset their password.

Allow User Gallery API Access

There are 2 ways to allow a user access to the Gallery API. Only Curators have the ability to enable API access.

• Curators (gallery admins) can enable the API for themselves. To do so, select your username and select My Profile. On the Keys tab select Yes for Admin API. The Curators API key and secret are now available.
• For all other users, Curators has to enable Gallery API access via the user's subscription. To do so, select the Subscriptions on the Admin toolbar. Select the user's subscription. Select Yes for API Enabled. The user can now access the Private Studio API key and secret on the Keys tab under My Profile.

Enable User Registration 

By default, users are not allowed to sign up for access to your company's private Gallery. To allow users to sign up for your company's private Gallery, select Yes for Enable user registration.

When a user clicks Sign In on the Gallery, the sign-in area will display, but the sign-up form will not. When the sign-up form is disabled, new users must be added by an Admin.