Platform Users

Platform Users allows Hydden.Control admins who can log in and use the product. Refer to Role Definitions for a details permissions overview.

The Platform Users page shows a table grid with columns providing:

• Name
• Email
• Status
• Role
• Last Login
• Created
• Actions, these are actions are available to admins for user management:
  • Suspend
  • Edit, the edit workflow uses the same steps as manually adding a user.
  • Delete

Adding a User - manually

1. Navigate to Settings | Platform Users and select + Add User.
2. For Email, enter the user's email address used with the authentication provider.
3. For Name, enter the user's name as you want it to appear in the application.
4. From the Status drop-down, select either Active, Inactive or Suspended.
5. From the Role drop-down, select the roles matching the permissions scope needed by this user to fulfill their job role. Refer to Role Definitions.
6. Click Create.

Role Definition Matrix

The platform user role definitions matrix outlines the capabilities for each type of user in Hydden.Control.

1. Administrator - Able to set up Hydden.Control and manage User Access Review (UAR) campaigns
2. Reviewer - participates in campaigns, making accept/reject decisions for account access
3. Auditor - views the results of campaigns

In this initial release Hydden.Control has three types of platform user and all users will be assigned to one of these types. Although users may perform multiple functions with Hydden.Control in different ways, there is no mechanism for users to have more than one platform user type in the initial release. Therefore, a user who, for example, both reviews access and manages campaigns would need to be assigned the Administrator role.

NOTE

If a user role is downgraded while that user is in an active session, the change takes effect the next time the user signs in. Users in an admin role may downgrade themselves, if they are not the only admin in the organization.

Feature	Administrator	Reviewer	Auditor
Accounts	Full access	Read only	Read only
Owners	Full access	Read only	Read only
Roles	Full access	Read only	Read only
Policies	Full access	No access	No access
Groups	Full access	Read only	Read only
Campaigns	Full access Create, modify, delete, start, extend and end campaigns. Review (accept/reject/comment) items in campaigns. Generate campaign report downloads.	Review (accept/reject/comment) items in campaigns where they are an assigned reviewer. Generate campaign report downloads.	Read only access to campaigns. Generate campaign report downloads
Applications	Full access	Read only	Read only
Job History	Full access	No access	No access
Settings	Full access	No access	No access
User menu	Profile, settings, logout	Profile, logout	Profile, logout
AI Assistant	Full access	Query data and take actions within their access limitations as defined by each section of this matrix	Query data and take actions within their access limitations as defined by each section of this matrix
UI Theme	Select theme	Select theme	Select theme

Token Duration

The Hydden.Control access token is valid for 1 hour. The refresh token expires after 24 hours.