This feature allows you to create users at various user access levels. You have the option to create learners/workers, managers, businesses, and administrator accounts.
It’s important that you understand the hierarchy order of user types and what access they have on the platform. You can also change the name of the user accounts to suit your business acronyms.
Administrators
Administrators have the highest level of access on the platform. Administrators can grant permissions to other users on the platform and edit any fields required. As an administrator you can also restrict other users’ accessibility across all module functions so they can only access what you want them to.
Managers
Managers are assigned based on the group structure, which is important when managers are seeking to run reporting on certain content. Based on the group structure managers are assigned to, they have authorisation to oversee all learner and candidate users and are responsible for all management of those users.
Employees/Learners
Learners strictly use the platform to complete set tasks/courses/events/workflows etc. which build into their Workforce Wallet to compile a detailed overview of their professional profile and development. Learners, just like managers, are assigned to a group structure so reporting and delegation of tasks are distributed correctly under each group.
Candidates
A Candidate user is only created automatically when they apply for a job within the Recruitment Module and are in the phase of being screened for suitability by management. Once successful, this user is transitioned automatically into a learner user license.
User Creation Tip
For bulk upload of user types, this can be done by ensuring all relative fields are replicated and pre-filled in a CSV spreadsheet ready for upload. If you are choosing to bulk upload 20 users or more, you are permitted to send the spreadsheet to our Support Team for uploading.
Add a User Account
1. Click ‘Add User’
2. Select User Type (Worker (Learner), Manager, Business or Admin). The below screen shot shows required information when creating an admin account
3. Select Status. Active: the user can access the platform. Disabled: The account is not yet live
4. Complete General Information (this will change when a different User Type is selected).
5. You have the option to upload a profile picture
6. Create a link between two or more user accounts providing the user the ability to easily switch between accounts from the menu in the top bar
7. Create login details for your new user (note that the password must be more than 6-12 characters)
8. Assign the user to groups. By doing this, you are allowing the user accessibility to all course materials, events, webinars, documents etc. assigned to those groups
9. Click ‘Create’
Assigning User Groups
1. Click on a user from the User Accounts page
2. Click ‘Assigned Groups’ within the Profile Summary.
3. Select the relevant groups/subgroups you wish to assign or unassign to the user. By assigning groups to your user account, you are giving the user access to all courses, news, webinars, documentation, and events within that group
4. Click ‘Save’ to save changes
Impersonate User
1. Click on the hamburger icon next to the user that you want to impersonate
2. Click ‘Impersonate user’. A new window will appear and allow you to navigate the platform and see exactly what that user sees. This can be used to test any settings made to the account or help problem solve if a user is having issues with the platform.
Admin Permissions
This module allows you to restrict or allow admin’s ability to access specific modules in the left-hand navigation. You can select the modules you wish to give the access to in the permission scheme and then assign that scheme to an admin.
Click the ‘Add Permissions’ button to get started
1. Click the ‘Admin Permissions’ tab
2. Click ‘Add permission’
3. Add permission scheme title
4. Select the modules that this setting allows
5. Click ‘Save’
The permission scheme you just created can be assigned when adding an admin user type (shown in the image below).
Import Users
You can import bulk users onto the platform by uploading a CSV compatible file. This is suggested when you are adding 20 or more users.
1. Click the ‘Import/Export’ drop-down box in the top menu panel
2. Click ‘Import Users’
3. Download CSV Template and fill out the form with all user information
4. Upload completed CSV
5. If you haven’t added a password for each user in the CSV, select an option from the drop-down box
6. Click ‘Validate & Import’
Export Users
A spreadsheet will be generated for you containing all users that match the selected criteria. It is not required to specify any of these options; they exist purely to provide further granularity.
1. Click ‘Import/Export’
2. Click ‘Export Users’ from the drop-down box
3. Select the relevant user type(s) and group(s) that they are associated with
4. Click ‘Export’
Manage Custom Fields
This feature allows admins to create custom fields for users that can display in registration forms, reports, user profiles and more. Robust configuration options capture almost every possible requirement and seamlessly integrates into our SSO solutions, requiring little effort on your part.
1. Click ‘Forms & Labels’
2. Click ‘Manage Custom Fields’ from the drop-down box
3. Select ‘Add Field’
4. Select the type of field you want to create
5. Give the field a name
6. Add a description
7. Toggle Yes if you would like the fields to be included in reports that are created
8. Toggle Yes if you would like learners to complete the user fields under Edit Profile where they can complete these manually
9. Click ‘Create’
Manage Forms
After User Fields are created, you can build a custom form for your users to fill out. There are 3 Active forms to create for learners, contractors, and business users.
1. Click ‘Forms & Labels’
2. Click ‘Manage Forms’
3. Click ‘Add form’
4. Add a page heading
5. Add a form title
6. Select the form type. Choose from Worker, Contractor, or Business
7. Select the ‘Publicity’ option from the drop-down box
8. Add an introduction
9. Assign the registrants to specific groups
10. Click ‘Add Standard Field’ to add a default field to your form
11. Click ‘Add Custom Field’ to add or create a custom field to your form
12. Click ‘Rename’ to change name of field
Click ‘Remove field’ to delete field from the form
13. Click and hold the hamburger icon to re-order the fields
14. Click ‘Create’ once the form is complete
We have updated the max character limitation for our standard fields. Whenever a user edits any of these fields in a form, the max length will be checked and validates, avoiding the user to input several characters that exceeds the limit.
The new max number is as following:
Max Length: The configuration admin can change under edit user field (/admin/user/edituserfield/id,xx)
Field Length: The actual length that will be stored into the database. Not possible to store more characters than this number.
|
Filed name
|
Default Max Length
|
Field Length
|
|
Role
|
100
|
100
|
|
Firstname
|
50
|
100
|
|
Lastname
|
50
|
100
|
|
Address1
|
200
|
200
|
|
Address2
|
200
|
200
|
|
Suburb
|
50
|
50
|
|
City
|
50
|
50
|
|
State
|
50
|
50
|
|
Postcode
|
10
|
10
|
|
Country
|
-
|
50
|
|
Phone
|
-
|
15
|
|
Mobile
|
-
|
15
|
|
|
-
|
254
|
|
Username
|
50
|
100
|
|
Password
|
-
|
100
|
|
Business Name
|
100
|
100
|
|
Business ABN
|
20
|
20
|
|
Business Address
|
200
|
200
|
|
Business Suburb
|
50
|
50
|
|
Business State
|
50
|
50
|
Upgraded our telephone plugin from version v17.0.0 to v24.5.0.
User Labels
You can modify the labels that are used to represent each user type. These labels will immediately appear in all areas throughout the platform.
Note: To reset a label back to its default, leave it blank. Custom names won't be applied in Certificate variables or Email Template variables.
1. Click the ‘Forms & Labels’ drop-down box in the top menu panel
2. Click ‘User Labels’
3. If you would like to change the user type label, click in ‘Singular name’ and ‘Plural name’ fields, delete current name and type desired name
4. Click ‘Save’ to save changes
Buy More Users
1. Click ‘Buy More Users’
2. Fill out the form
3. Click ‘Submit’ and one of our friendly team members will be in contact with you shortly
More
1. ‘Username setting’ will take you to System
2. ‘Registration setting’ will take you to System
Implementation of CSRF Tokens
To enhance security and mitigate cross-site request forgery (CSRF) vulnerabilities, CSRF tokens have been added and added validation to the CSRF token, to the following actions:
Admin:
- Add User
- Edit User
Manager:
- Add User
- Edit User
This is Actual CSRF- token value before edit in user edit page.
Edited the CSRF-token as below.
Now our system validates is CSRF token has accurate value or not.
This implementation also ensures that if the CSRF token is tampered with or edited, the forms for adding or editing users will not save, thereby preventing unauthorized actions and enhancing security against CSRF attacks.