Users
Access & Teams > Username holds the organization's people and robot accounts, with each one's profile, license and status.
The list
The cards at the top count and filter (click to filter, click again to clear): Total Users, Active Users, Inactive Users (including pending invites), Licensed, Unlicensed and +30 Days No Login. The Person, Robot account, Full access and Runner only filters split the list by account type and license type.
| Column | What it shows |
|---|---|
| Name | The name. |
| Identifier | The person's email or the robot account's identifier. |
| Profile | The person's profile in this organization. |
| Account type | Person or Robot account. |
| License | Full access, Runner only or Unlicensed. |
| Last Login | When the person last signed in. |
| Status | Active, Pending (invited but hasn't signed in yet) or Inactive. |
Each row's actions are under More actions and change with the account type and status.
Invite a person
Add opens Create User. With Person selected in Account type:
- Fill in Name, Email and Profile.
- Under License, choose an available seat or Don't assign now (you can assign one later).
- Use Send Invite.
The person gets the email "You have been invited to Proton", with Set up my account. The link is valid for 48 hours: they create a password (at least 8 characters, with a letter and a number) and can sign in right away. Until they sign in, the account stays Pending.
- Resend Invite sends a new link to someone who hasn't signed in yet.
- Cancel Invite removes the invited person from the organization and frees up the license.
- To sign in to the portal, the person needs a Full access license in this organization. See Licenses.
- An email that already has a Proton account, in any organization, can't be invited again from here: to add that person to your organization, contact Atomic.
Which profiles you can assign
The Owner profile isn't assigned through the portal, and only an Admin can assign the Admin profile. The other profiles can be chosen by anyone who can create or edit users. See Profiles and permissions.
Robot account
A robot account connects Proton Runner and doesn't sign in to the portal. It's the recommended way to connect the machines that run the automations and to give a token to integrations (CI, Jira Automation, SAP CBTA). See also Runner account.
To create one, choose Robot account in Account type:
| Field | What it is |
|---|---|
| Name | Required. |
| Robot identifier in Runner | Optional. It's what you type in the Runner to connect. If empty, Proton generates it from the name. It's unique and can't be changed later. |
| Password | Optional. If empty, Proton generates a secure password. |
| License | Assign automatically uses a Runner only seat or, if there's none, a seat included in the plan. |
Create robot account shows the Robot account credentials: the server, the identifier, the password and the assigned seat, with Copy. Save the password right away: it won't be shown again.
A robot account always has the Executor profile and doesn't belong to teams.
Robot password and tokens
- Change Password generates a new credential: Set custom password or Generate system password. The previous password no longer connects the Runner.
- API tokens lists the robot's tokens, with creation date, last use and expiration, and Revoke. Generate API Token asks for the Token Name and the expiration (No expiration or a date). The token is shown only once, and runs started with it show up under the robot's name. With the query API in the plan, Query API only (read) creates a token that only reads: it is the one for monitoring and the data warehouse (see Integrations). In the list, it shows the Query only tag.
- Reactivate robot brings back a deactivated robot account, with an available or automatic license.
Edit
Edit changes the person's Name, Email and Profile. The profile applies only to this organization; the name and email belong to the person's account and apply to all their organizations. For a robot account, only the name can change.
Change Password sets a new password for the person (with the same rules as the first sign-in). The person isn't notified by email.
Teams and license
- Manage Teams adds the person to and removes them from existing teams. To create or edit teams, use Go to Team Management. The person gets an email when they join or leave a team. See Teams.
- Manage License shows the current license and the available seats, so you can Assign license, Change license or Remove license. The 30-day rule applies: see Licenses.
Deactivate
Deactivate User removes the person's access to this organization immediately, including their open session and tokens.
- The license follows the 30-day rule: in general, it stays reserved for the person until the period is over.
- The scheduled runs they created are canceled at their time, and their recurring runs are paused, with the reason "the person who scheduled it is no longer active in the organization".
- Runs that are already running go on until they finish.
To bring the person back, use Reinvite User: they get a new invite and create another password. After they sign in, assign the license.
Permissions and mobile
Viewing, creating (inviting), editing, deactivating, changing the password and managing the teams of users are separate permissions in the profile. Choosing the profile in the invite requires viewing profiles; choosing the license requires viewing licenses; and assigning or changing the license requires editing licenses.
The screen is designed for desktop.