User Management

The Qrvey Admin Center enables you to create and manage user accounts in Qrvey Composer, assign roles and permissions, and set up authentication methods.

From the Admin Center, you can open the page by selecting the User Management icon in the left navigation panel:

Manage User Accounts

Create a New User Account

1. From the Users tab, select Create New User.

2. Complete the fields in the New User dialog.

   • First Name

   • Last Name

   • Email address

   • Password - This field assigns the initial password for the account. The user can change this password later.

   • Organization - Select an existing organization from the dropdown.

     Note: This feature is available in v9.2.3.

   • Role - Select one or more roles from the list, or create a new role by entering text in this field.

     Note: If you have created a user account from an OpenID provider, the new account is assigned to the Composers role by default.

3. Select Create. The Users table updates to reflect the new user account.

Tip: User accounts that signed up through OpenID are identified in the table by an additional icon in the First Name field.

Edit a User

1. In the Users tab, select the options menu for a user account and select Edit.
2. Edit the settings as needed. To reset the user’s password, select Reset User Password.
3. When finished, select Save.

Delete a User

1. In the Users tab, select the options menu for a user account and select Delete.
2. When prompted, confirm your choice and select Delete to remove the user account from the list.

Roles and Permissions

Roles and permissions enable you to control access to sections of Qrvey Composer.

Before you create user accounts, review the needs of your company's end users in case you need to implement any restrictions on Qrvey functions.

Default Roles

The Qrvey platform contains the following defined roles that cannot be deleted or renamed:

• Super Admin - All permissions are enabled for this default administrator role. This role cannot be edited. The initial Administrator account was set up when your instance of Qrvey platform was created.
• Composers - The default user role with access to all Qrvey Composer features. This role can be edited.

You can create additional roles with customized permissions.

Permissions Catalog

The following table lists supported permissions that can be assigned to one or more roles.

Section	Admin	Composer
Data
Connections	✅	✅
Datasets	✅	✅
Applications
Dashboard	✅	✅
Legacy Dashboard (Qrvey Ultra)	✅	✅
Pixel-Perfect Reports	✅	✅
Automation	✅	✅
Settings	✅	✅
App Administration
Admin Center	✅	❌
Exports
Exporting	✅	✅
Scheduling Exports	✅	✅
Subscribing Other Users	✅	✅

Create a New Role

Your roles should reflect your business needs.

1. From the Roles tab, select Create New Role. The New Role dialog displays.

   a. At minimum, add a name for the role, then select Next.

   b. Select the users to assign to the role.

   c. When finished, select Save. The Roles table updates to reflect the new role.

   You can delete the role entry by selecting Delete from its options menu. When you delete a role, it does not delete any associated user accounts.

2. After you have created the role, assign a set of permissions.

   a. From the Roles tab, select a role name (link) from the table to display its Users and Permissions options.

   b. Select Permissions. The page updates to display the available permissions.

   c. Select the Edit checkbox for each permission to add for this role.

The system automatically saves your changes. The changes take effect in the system after a few minutes.

Set the Default Role

By default, new user accounts are assigned to the Composers role. You can change the default role by selecting the Default Role radio button from the list of available roles.

Change Users Assigned to a Role

1. In Qrvey Admin Center, select the User Management icon in the left navigation panel and display the Roles tab.

2. Select a role name (link) from the table.

   The page updates to display Users and Permissions options.

3. Select Users. The page updates to display the users currently assigned to the role.

4. To add a user to the role, select + Add Users, select the users from the list provided. The Users table updates to display the new user.

To remove a user from the role, select the user from the list and select Remove Users, then select Delete when prompted. The Users table updates to reflect the deleted user.

Configure Authentication

The Qrvey Admin Center enables you to set up authentication methods for users and creators in Qrvey Composer and for end-users that access the embedded applications. For both of these types of users, you can enable the following authentication methods:

• Qrvey authentication: Uses the email and password specified in the user account.

• OpenID authentication: Requires registration with an OpenID Connect-compliant provider based on the OAuth 2.0 protocol. For additional configuration details related to OpenID, see the following articles:

  • Using Google as the OpenID Provider
  • Using Auth0 as the OpenID Provider

The login page for Creators in Qrvey Composer is configured on the Onboarding tab in Qrvey Admin Center. For more information, see Customizing Qrvey Composer. The login settings for end users are configured in the Dashboard widget.

If both authentication methods are enabled, users can select their preferred method to log into the system.

Configure Qrvey Authentication for Composers

1. From User Management, open the Authentication tab.
2. In the Authentication Method for Composers in Qrvey Composer section, select or clear Qrvey Authentication.

Configure OpenID

You can use Qrvey to add an existing user to OpenID. However, that user does not display the icon identifier in the Users table.

1. From User Management, open the Authentication tab.

2. In the Authentication Method for Creators in Qrvey Composer section, select Open ID.

3. Enter the following information in the fields provided:

   • OpenID Provider Name - Used on the OpenID provider Log In button.
   • Realm - Domain of the OpenID Connect provider URL (for example, https://yourdomain.us.auth0.com or https://accounts.google.com).
   • Client ID - OAuth 2.0 credential that must be obtained from the OpenID provider on the API Console Credentials page.
   • Client Secret- OAuth 2.0 credential that must be obtained from the OpenID provider on the API Console Credentials page.

   The Return URL field displays a calculated URL that cannot be edited. This HTTP endpoint receives the response from the OpenID provider. The OpenID provider redirects to this URL after successful authentication and authorization.

   • For creators, this URL corresponds to the Qrvey Composer Main URL (for example: https://< composerURL >/app/index.html).

   • For end users, this URL corresponds to a generic End-User Web App Page URL (for example: https://< composerURL >/app/take-end-user).

   Important: The return URL must be added to the OpenID provider as an Authorized Redirect URL.

4. Select Test and Save. A successful test generates the URL in the URL field.

   • Composer: This URL is associated with the Log In with OpenID button.
   • End Users: This URL is not displayed, but it is passed to backend services.

Set Timeouts for User Sessions

You can specify the following types of timeouts:

1. From User Management, open the Authentication tab.

2. Under User Session, specify the following times using the fields provided (default, 168 hours):

   • Maximum session timeout. Occurs regardless of the user’s interaction with the platform.
   • Idle session timeout. Occurs after a period of time in which there is no user interaction detected.

Use the Allow Multiple Sessions checkbox to enable or disable multiple user sessions for a single user account.

Configure Qrvey Authentication for End Users who Access Embedded Dashboards

1. From User Management, open the Authentication tab.
2. In the Authentication Method for End Users that Access Embedded Dashboards section, select or clear Qrvey Authentication.

Configure OpenID

1. From User Management, open the Authentication tab.

2. In the Authentication Method for End Users that Access Embedded Dashboards section, select Open ID.

3. Enter the following information in the fields provided:

   • OpenID Provider Name. Used on the OpenID provider Log In button.
   • Realm. Domain of the OpenID Connect provider URL (for example, https://yourdomain.us.auth0.com or https://accounts.google.com).
   • Client ID. OAuth 2.0 credential that must be obtained from the OpenID provider on the API Console Credentials page.
   • Client Secret. OAuth 2.0 credential that must be obtained from the OpenID provider on the API Console Credentials page.

   The Return URL field displays a calculated URL that cannot be edited. This HTTP endpoint receives the response from the OpenID provider. The OpenID provider redirects to this URL after successful authentication and authorization.

   • For creators, this URL corresponds to the Qrvey Composer Main URL (for example: https://< composerURL >/app/index.html).

   • For end users, this URL corresponds to a generic End-User Web App Page URL (for example: https://< composerURL >/app/take-end-user).

   Important: The return URL must be added to the OpenID provider as an Authorized Redirect URL.

4. Select Test and Save. A successful test generates the URL in the URL field.

   • Composer: This URL is associated with the Log In with OpenID button.
   • End Users: This URL is not displayed, but it is passed to backend services.