User role management

DataQI provides a user role management interface for reviewing authenticated users, finding individuals, and assigning or revoking platform permissions.

Available roles

DataQI enforces permissions across three distinct system roles:

• Basic access: Grants baseline access to interact with agents.
• Admin: Grants administrative access to manage users, connections, and system settings.
• Diagnostics user: Grants access to the engineering diagnostics panel.

First-login provisioning and blacklisting

The first person to authenticate with Single Sign-On (SSO) in a new environment receives Basic access, Admin and Diagnostics user so that the environment can be administered.

For each subsequent person, first-login provisioning depends on the environment setting:

• When automatic Basic access provisioning is enabled, the new user receives Basic access.
• When it is disabled, the user record is created with no roles and an administrator must grant access.

Once a user record is created, the system will never automatically provision additional roles upon subsequent logins. Because roles are explicitly required for access, revoking the Basic access role effectively acts as a blacklist—preventing that user from interacting with the platform entirely, even if their SSO login remains valid.

Search and navigation

The user list supports simple navigation capabilities:

• Sorting and pagination: The list is paginated and supports sorting by name, email, or date added.
• Search: A global text search allows administrators to filter the dataset by name or email.

Bulk administration

Administrators can use the action bar to apply changes to multiple users simultaneously:

• Additive selection: You can select users, run a new search or navigate to a different page, and select more users. Your selection is preserved until you perform an action or explicitly clear it.
• Add roles: Select one or more available roles and apply them to all chosen users in a single operation.
• Remove roles: Review the roles currently held by the selected users and selectively revoke them.

Every role assignment or removal is recorded securely in DataQI’s backend audit logs.