Authorisation for user management

For extra security on your account, you can ensure users need authorisation to create or edit a user account.

Enabling user authorisation

You can choose to enable authorisation for user creation, user edits or both. 

Before you enable user authorisation, you'll need to create the messages that will be sent for user creation and edits. If you have already created the messages, skip to step 9. 

1. In Horizon, go to the Content tab and click 
   
   
2. Create email content as you normally would. If you are creating the user edits message, you can create a SMS message as well as a email. For user creation, you can only create emails.
   
   
3. You'll need to add in the confirm user creation or confirm edit link. To do so, add a link by clicking   in the editor toolbar.
   
   
4. In the pop-up, from the 'Type' drop-down list, select 'Subscriber action (advanced)'.
   
   
5. From the 'Special link' drop-down list, select 'Confirm User creation' for user creation or 'Confirm User changes' for user edits.
   
   
6. Click  to add the link.
   
   
7.  the content.
   
   
8. If you want to use user authorisation for user creation and user edits, you'll need to create a second message. To speed up this process, you can clone the first message by clicking  to the right of the message in the content tab. Then change the link to the other user authorisation , as explained in step 5.
    
9. Now you'll need to enable user authorisation. Click  in the top right-hand corner. 
   
   
10. Select 'Account settings' from the left-hand menu. If you do not have access to this area, please get in touch with your HTK account manager.
    
    
11. Click + by 'User Management'
    
    
12. Click the setting you want to enable, 'Confirm User Edits' or 'Confirm User Creation'. 
    
    
13. The settings for the user creation and user edits are the same. You'll need to click  to the right of the 'Enabled' field to turn it on. Tick the 'Enabled' box and click 
    
    
14. Click  to the right of the 'Message' field to select the message that will be sent. Click  to find your message, then click  to add the message
    
    
15. You can change the expiry time for a message from the default of 30 minutes. If a user creation or edit link isn't clicked by the expiry time, the link will expire and not work. A new email will need to be sent. To change this, click  to the right of the 'Expire In (mins)' field, enter the expiry time in minutes and click  

Setting up users

User creation

For user creation authorisation to work, you'll need at least one user with authorisation permissions. To do so:

1. Click  in the top right-hand corner. 
   
   
2. Select 'Roles (permissions)' from the left-hand menu, found under 'Users and permissions'.
   
   
3. Click  to edit a role, or create a new role by clicking 
   
   
4. You'll need to ensure you have the 'Admin' section added. If you are editing a role and don't see 'Admin', click the  at the top of the page. Tick 'Admin', click  then click Close.
   
   
5. In the 'Admin' section, you'll find 'Users', where 'Authorise' is listed as a permission. This is the permission you need to ensure the user has authorisation permissions. If you want to create a user that can create users, but requires authorisation, you'll need to remove this permission from their role by clicking the  icon to the right of the permission.
   
   
6.  your role and assign it to a user. Any user that has the authorisation role/permission will get an email asking for confirmation, when a user without this permission creates a new user. If you have multiple users with this permission, they will all get an email. 

User edits

User edit authorisation works slightly different to user creation. For user edits, the user who edited the user will get the email and need to click the confirm link. To allow users to edit users, you'll need to add the 'Update' permission to a user role.

1. Click  in the top right-hand corner. 
   
   
2. Select 'Roles (permissions)' from the left-hand menu, found under 'Users and permissions'.
   
   
3. Click  to edit a role, or create a new role by clicking 
   
   
4. You'll need to ensure you have the 'Admin' section added. If you are editing a role and don't see 'Admin', click the  at the top of the page. Tick 'Admin', click  then click Close.
   
   
5. In the 'Admin' section, you'll find 'Users'. The permission 'Update' needs to be added to allow the user to edit users. To add this, click the  icon to the right of the permission. Tick the 'Update' permission and click 
   
   
6.  your role and assign it to a user. 

Creating a new user

1. The user without the permissions to 'authorise' a new user (as explained above) will need to create a new user. The new user will be visible in Horizon, but the new user won't be sent an activation email nor is it possible to manually activate the user, until the creation has been authorised.
   
   
2. Any users with the authorise permission will receive an email, with a confirmation link for the user creation. If the confirmation link has expired, a new confirmation email can be sent by editing the new user and selecting to send a new authorisation email. 
   
   
3. Upon clicking the confirmation link, the user will be taken to a Horizon page, which indicates the user has been created. If another user has already confirmed the user, the Horizon page will say this. 
   
   
4. The new user will receive an activation email and will be able to setup their account as usual.

Editing a user

1. A user edits another user's email, phone number and/or password and 's the record. Upon saving, a pop-up will appear asking for the user to enter their password. 
   
   
   
2. Enter the password and click . The user will save.
   
   
3. The changes aren't made until the editor confirms the changes. The user that made the changes will receive an email, with a confirmation link. If the confirmation link has expired, a new confirmation email can be sent by editing the user and selecting to send a new authorisation email. 
   
   
4. The user clicks the confirmation link and is taken to a Horizon page that confirms the user changes were made.