> ## Documentation Index
> Fetch the complete documentation index at: https://docs.germainux.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Users

> The Users section explains how to create, authenticate, invite, and manage people who access the Germain Workspace.

Service
`Management`

Availability
8.6.0 or later

> [card] [The Users section](#the-users-section)
>
> Create, authenticate and invite

> [card] [User Authentication Options](#user-authentication-options)
>
> Choose how users sign in

> [card] [Roles and Teams](#roles-and-teams)
>
> Assign roles and teams

> [card] [Recommended Configuration Process](#recommended-configuration-process)
>
> Step order for user setup

## The **Users** section

The **Users** section explains how to create, authenticate, invite, and manage people who access the Germain Workspace.

## GermainUX user-management overview

GermainUX supports several user-management models, allowing organizations to manage accounts directly in GermainUX or integrate with an existing enterprise identity provider.

## User Authentication Options

| Method | Description | Recommended Use |
| - | - | - |
| **Database/JDBC** | Authenticates GermainUX-managed users against a configured database. | Organizations that want to manage Workspace accounts directly in GermainUX. |
| **LDAP** | Authenticates users through an LDAP directory and maps groups to GermainUX Roles. | Organizations using a centralized LDAP directory. |
| **OAuth 2.0/OpenID Connect** | Authenticates users through an external identity provider. | Organizations requiring enterprise single sign-on. |
| **Windows Active Directory** | Uses Active Directory users and groups for authentication and Role assignment. | Organizations managing identities through Microsoft Active Directory. |

## User Administration

Go to:

**Germain Workspace -> Left Menu -> Settings --> System -> Auth Settings -> Users**

Depending on the configured authentication method, administrators can:

* Review configured users
* Create GermainUX-managed accounts
* Assign Roles and Teams
* Send welcome emails
* Reset passwords
* Review pending access requests

> [accordion] Show all 9
>
> * Approve or reject requested access
> * Enable or disable users
> * Remove users who no longer require access

Users managed by LDAP, Active Directory, or an OAuth provider are generally created and maintained in the corresponding external identity system.

## Roles and Teams

Each GermainUX user can be assigned:

| Access-Control Object | Purpose |
| - | - |
| **Role** | Controls what the user is authorized to do in GermainUX. |
| **Team** | Controls which dashboards, data, and Session Replays the user can access. |

When authentication is provided through LDAP or OAuth, external groups can be mapped to corresponding GermainUX Roles.

## User Documentation

Select the guide that matches your user-management requirement:

| Guide | Description |
| - | - |
| [Database Users and Roles](https://docs.germainux.com/main/database-user-management.md) | Configure JDBC authentication and create GermainUX-managed users. |
| [LDAP User Management](https://docs.germainux.com/main/ldap-user-management.md) | Configure LDAP authentication, directory searches, and group-to-Role mapping. |
| [OAuth User Management](https://docs.germainux.com/main/oauth-user-management.md) | Configure OAuth 2.0 or OpenID Connect authentication and enterprise SSO. |
| [Password Reset](https://docs.germainux.com/main/password-reset.md) | Allow eligible users to securely reset a forgotten password. |
| [User Access Request](https://docs.germainux.com/main/user-access-request.md) | Allow prospective users to request access and administrators to approve, reject, and audit requests. |
| [Windows Active Directory User Management](https://docs.germainux.com/main/windows-active-directory-user-management.md) | Create and map Active Directory users and groups for GermainUX access. |

## Recommended Configuration Process

**1. Select the authentication method approved by your organization**

**2. Configure the corresponding authentication provider**

**3. Create or synchronize the required users**

**4. Assign the appropriate Roles and Teams**

**5. Test authentication with a non-administrator account**

**6. Verify that the user can access only the authorized features, dashboards, data, and Session Replays**

**7. Periodically review accounts and remove access that is no longer required**

## Get Help

> [card] [Contact GermainUX Support](https://docs.germainux.com/main/support.md)
>
> The GermainUX team helps you get up and running faster, empower your team, turn data into actionable insights, and optimize performance to deliver measurable business outcomes.

> [card] Can't find what you need?
>
> Search all GermainUX docs with **Ctrl + K**, or use the feedback buttons at the bottom of this page to tell us what is missing.

The content of this document is proprietary to GERMAIN SOFTWARE.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.