User and Permission Management in Skuid Platform

Skuid Platform is its own independent service, so there are no predefined users. Instead, Skuid builders create Skuid Platform’s database of users. After users are created, their permissions and access to the platform’s various features are set with profiles.

Users

After registering for a Skuid Platform site, a default user—with an Admin profile—is created using the username and password provided at registration.

As Skuid does not pull its user accounts from any existing data source, you must register users within the Skuid Platform itself.

Add users [[]]

Add users manually [[]]

  1. In Skuid, click Settings > People > Users.

  2. Click Create to create a new user.

  3. Specify your new user’s information:

    • First Name
    • Last Name
    • Username: The Username must be unique to your site.
    • Email: The email does not have to be unique; you can have one person with two different usernames using with the same email. Only the username has to be unique.
    • Profile: Indicate the user’s profile.
    • Type: Full or Portal
  4. Click Save.

The new user now receives an email welcoming them to Skuid and asking them verify their email address.

After clicking the verification link, the new user can then set their password:

image0

After this, your new users will be ready to use Skuid!

Add multiple users via CSV file [[]]

Using a CSV (comma separated values) file allows you to add multiple users at once.

  1. In Skuid, click Settings > People > Users.

  2. Click the Import CSV.

  3. In the CSV Import Users wizard, Upload File step, select:

    • Browse: Search for and select the CSV file.
    • Delimiter: The indicator used to mark a data set. The options are a comma (“,”), a semicolon (“;”), or a TAB. Make sure to select the same delimiter that is used within the CSV file to separate sections of data.
    • Default Profile: Select from a list of profiles currently available in this site.

    Note

    This profile will be used for all imported users, but it can be changed for individual users after they have been imported.

  4. Click Next.

  5. In the Assign Columns step, map the user information fields to the corresponding column in the CSV file.

    • Required Fields

      • Email
      • First Name
      • Last Name
      • Username

      Warning

      The username must be unique to the site or the user will not be created.

    • Optional Fields

      • Profile: If there is a column in the CSV file that corresponds to the individual’s profile, indicate it here. Adding a “profile” column to the CSV file means that users will be imported with their assigned profile because values in this column supersede the Default Profile (above).

        Note

        • If no column is selected here, all users are assigned the designated Default Profile.
        • If a column is selected, but values in the column do not match the list of available profiles, those users will be assigned the Default Profile.
      • Type

      • Federation Id

  6. Click Next.

  7. In the Preview step, review the list of users to imported.

  8. Click Import.

Note

If the CSV file is large, importing may take a while. This process is performed in background so you can continue working in Skuid.

  1. Once the users have been imported, locate them in the list of users and modify the following column:

    • Active: You must check this box to allow a user to access your site. If left unchecked, new users will not be able to set their passwords or log in.
  2. Click Save.

User provisioning through SSO [[]]

Skuid Platform supports user provisioning through any SAML-compatible identity provider. If you have many users, all of whom already have an account on your identity provider, this method of user creation is highly recommended—and a lot more efficient.

For more information, see the User Provisioning within Skuid Platform section of the Introduction to SSO, SAML, and Skuid topic.

Reset user passwords [[]]

While users can reset their own passwords, Skuid administrators can also initiate this process from the Users screen:

  1. Navigate to Settings > People > Users.
  2. In the More menu next to the name of the user, click Reset Password.

The user receives an email containing a link to reset their password. Note that user password will not change until users click the link within the email.

Activate and deactivate users [[]]

Users within Skuid Platform cannot be deleted. Instead, users can be activated and deactivated. Deactivated users do not count against your Skuid subscription limit.

To activate or deactivate users:

  1. Navigate to Settings > People > Users.
  2. In the More menu next to the name of the user, click Activate or Deactivate .

You can activate and deactivate users as needed. Users will not receive a notification of their activation status, but will their access will be immediately granted or revoked respectively.

My Settings

Each user can configure their own Skuid settings by clicking their name in the Skuid navigation bar and clicking My Settings.

image1

From this page, users can update the following personal settings:

  • First name
  • Last name
  • Email
  • Username
  • Federation Id (If the site has SSO enabled)

They can also update their personal locale settings, including:

  • Locale
  • Time Zone
  • Language

As well as site behavior settings:

  • Land On Last Visited Page After Login: If enabled, the user will be directed to the last Skuid page they visited whenever they log in. Otherwise, they are redirected to their profile’s default app. Disabled by default.

My Data Source Credentials

Users can enter, save, delete, and edit usernames and passwords for any data source configured for Per-user credentials.

Profiles

Profiles determine user permissions in Skuid platform and enable you to set access to certain Skuid apps and data sources. Ensure marketing users can access marketing and sales apps, while only HR users can access the HR app—and restrict who can edit Skuid pages. You may also set access to individual data sources based on profiles. Profiles allow you to configure the perfect combination of permissions and restrictions for your users.

Note

Ensure that each profile has access to both the appropriate apps and the necessary data sources used within those apps. A user who can access an app, but not the data sources used within its Skuid pages, will encounter unexpected behavior.

Warning

Even if your page does not contain models for certain data sources, savvy users can create them dynamically using Skuid’s JavaScript API. Exercise caution when assigning each profile’s permissions, particularly for data sources secured with implicit username/password.

There are three default profiles available:

  • Admin: A profile with full access to all Skuid features and apps. Admins may configure Skuid pages and change site settings, so this profile should be assigned to Skuid administrators and IT administrators.

  • Standard: Suited for end-users of Skuid apps, this profile does not have the Configure Site permission, meaning the user cannot edit Skuid pages or change site settings.

    By default, standard users also will not have access to any apps. You must configure which apps they have access to, or standard users will simply see an error page when they log in.

    For more information about app deployment, see the App Deployment with Skuid Platform topic.

  • Public: Intended for end-users on public-facing websites, such as customer portals, every non-logged in user has public profile permissions. By default, this profile cannot access anything, and its permissions must be specifically configured.

    Since public profiles can expose your Skuid app to the web, pay careful attention to the permissions you set on this profile. Also ensure that the security settings within your data source are appropriate for public use.

    You cannot create multiple types of Public profiles.

    Note

    Any files used in Skuid pages—including themes—must be marked Is Public in the Files tab of the Skuid UI.

Create new profiles [[]]

You must clone one of the three existing profiles (Admin, Standard, or Public) to create new profiles. Doing this provides you a baseline of permissions to start.

  1. In Settings > People > Profiles, click Create.
  2. Select an existing profile to clone from.
  3. Give it a name.
  4. Click Create.

After creating your new profile, edit its permissions as necessary.

Edit profile permissions [[]]

In the more options menu beside a profile, click Configure in the More menu to modify its settings.

Note

Skuid respects the permissions set within the external data source, and will not allow the Skuid Administrator to give a user access to content they are not permissioned to view within the data source.

General Settings tab [[]]

Configure whether or not the profile is allowed to:

  • Configure Site: Configure Skuid Platform site settings and Skuid pages.
  • Configure Self: Configure their own profile.

Note

Only the Admin profile—and profiles cloned from the Admin profile—can be assigned the Configure Site permission.

App Access tab [[]]

Set which apps a profile may use (or Allow all), as well as which app is the profile’s default.

Note

Only one app can be selected as default, and it must first be enabled for the profile.

Data Source Access tab [[]]

Determine which data sources a profile may access (or Allow all).

Note

Make sure to give users access to both the apps you want them to see and to the data sources used within those apps.

User Signup tab [[]]

The settings in this tab enable users to sign up for an account without contacting an admin. User signup is activated at the profile level and each profile can have only one self-signup setup. (However, you can create different signup experiences for each profile.)

There are two aspects to user self-signup:

  • Enable user registration for this profile—make self-signup possible.
  • Create custom registration pages—format the pages where users perform self-signup.
Enable user registration for this profile

Sliding the toggle to enable registration, then modify the following settings:

  • Registration slug: Builders can select the slug used in the registration API endpoint URL. Developers can use this REST API endpoint to programmatically generate new user accounts.

For example, if you select “Admin” for the slug, Skuid displays:

https://[your <https://[your_site url]/users/signup/admin

Note

In the Action Framework, Run Platform Action now includes a new action: Register New User. This allows builders to declaratively initiate user self-signup as part of any Skuid Page. For more information, see Manually Create a Custom signup Workflow.

  • Permitted Email Domains: Whitelist specific email domains using a comma delimited format. If none are indicated, all domains are allowed.
  • Require Email Verification on Signup: Checked by default. If checked, after the user has completed the signup process, they will receive an email with a link inviting them to log into the app and configure a password for their new account. If unchecked, then user signup requests must include a password along with other credentials (first name, last name, etc.) to successfully create a user account via the self-signup API.
Custom registration pages

Once you enable user registration, you can then slide the Custom registration pages toggle to select which pages to use.

This card displays the full registration URL at the top.

  • Registration Pages: Choose from a default user signup experience, or create a custom-branded user signup experience. Once you make your selection, click Preview to see how the default or custom pages will look to the end user.

    • Default: If checked, Skuid uses standard signup, confirmation, and verification pages.

    • Custom: If checked, click the search to choose from a list of Custom Skuid Pages to use for the following registration pages:

      • Custom Signup Page
      • Custom Signup Confirmation Page
      • Custom Verify page

Note

You can remove these pages by clicking Remove custom signup pages.

The values the user submits are added to the list of that profile’s users.

Assign profiles [[]]

Profiles must be assigned to users through on the Users page in Skuid Settings, accessed by navigating to Settings > Users.

  1. Click Details in the More menu next to the specific profile.
  2. Click Security Settings.
  3. In the Profile dropdown, select a new profile type.