IDV Platform RBAC Users
A User is an internal or external account in the IDV Platform Back Office.
In the RBAC model, users inherit permissions from roles assigned to their groups. They cannot receive roles or permissions directly.
To learn more about how RBAC controls access to IDV Platform, see How Access Is Granted.
User Types
IDV Platform supports two types of users:
- Internal users—accounts created and managed directly in IDV Platform.
- External (SSO) users—accounts provisioned automatically through an external identity provider. Their login and email are managed by the identity provider and cannot be edited in IDV Platform. Their first and last names can be updated in IDV Platform.
For instructions on viewing and editing user accounts, see View User Details and Edit User Details.
User Lifecycle
User management in IDV Platform includes account creation, activation, and deactivation.
These actions are available through the Back Office UI.
For instructions on managing user accounts, see Manage Users.
Account creation
Newly created users receive the Active status by default.
For instructions on creating internal users, see Create User.
For information about initial group membership and available predefined groups, see New User Access and Default Groups.
Active and inactive status
An Active user can log in to IDV Platform. Their access to functional areas depends on their permissions.
An Inactive user cannot log in, start a new session, and obtain or refresh an access token. Access tokens issued before deactivation may remain valid until they expire, for up to 5 minutes. After that the user has no authenticated access on any device.
Inactive users can be edited but cannot be assigned to groups. Activating a user changes their status to Active, allowing them to log in again.
For details about changing user status, see Activate or Deactivate User.
User Management in Back Office
User management in IDV Platform Back Office includes viewing, searching for, creating, editing, activating, and deactivating user accounts. The available actions depend on the user's permissions and mandatory IDV Platform restrictions.
The Users section displays user accounts and their current statuses. Users with the required permissions can view account details, including group memberships and roles inherited through those groups. For instructions on viewing and searching for users, see View Users.
Authorized users can add other users to groups or remove them from groups to manage their access to IDV Platform. For instructions, see Manage Group Members.
For the permissions required to perform specific actions, see Common Actions and Required Permissions.
Access restrictions
Users cannot edit their own accounts or modify their own group memberships, even if they have the Admin role.
IDV Platform also prevents users from deleting or deactivating the last active user with the Admin role.
For additional rules and restrictions, see General Rules and Constraints, Admin Role Restrictions, Default Group Restrictions, and General Rules and Constraints for Default Roles.
Password Management
IDV Platform manages passwords for internal users, while an external identity provider manages passwords for external (SSO) users.
Users with the required permissions can generate password reset links for internal user accounts.
For instructions, see Reset User Password.
Next Step
Learn how roles are used to organize permissions and manage access in IDV Platform in Manage Roles.