As an administrator, you have the power to manage the user access to Molequle. In the Authentication section of the Molequle portal, you can see a list of all the users that currently have access to Molequle.
For each user in the list, you can manage their account by updating their name, email address, roles, groups, or delete their Molequle account entirely. Please keep in mind that some attributes, such as name or email address, for users coming from your own identity provider, will be automatically set by Molequle. Any updates to these attributes must be done in your identity provider.
Also, if a user is deleted from your identity provider, their access to Molequle will be revoked automatically. You will still see the user in the list but the user will no longer be able to login.
How can I invite users?
Molequle supports just-in-time provisioning, meaning that the following section is only relevant to you if your organisation is using Molequle as an identity provider instead of an external service, such as Azure AD.
If your organisation is not using Molequle as an identity provider, you can invite new users to Molequle by clicking on the "Invite user" button in the upper right corner of the Authentication section. This will open a dialog box where you can provide the user's name, email address, roles, and groups.
Other than the name and the email address, you'll also be asked to provide the following information:
Unrestricted access: By default, Molequle uses groups to limit users' access to specific people or accounts. If you want to grant a user full access to Molequle, regardless of their group assignments, check the "Unrestricted access" box.
Roles: Molequle allows you to create custom roles that provide users with specific permissions and access to different functionality within the app. Select the roles that you want the user to have. Depending on the role configuration, certain roles may be assigned by default.
Groups: You can create custom groups in Molequle to limit users' access to specific people or accounts. Users without unrestricted access will only be able to see data that is associated with the groups they have been assigned to. Select the groups you want to assign the user to. Depending on the group configuration, certain groups may be assigned by default.
After inviting the user, you can always edit their information, roles, or groups by clicking on the edit icon in the list of users.

