Manage Users in the Dashboard

Two user types can access the Dashboard. Invictus manages Local users. Your tenant manages Microsoft Entra ID users.

recommended

Prefer Entra ID users for security.

Entra ID

Requires a synced Entra ID group.

The Dashboard works with users in Entra ID groups. See syncing groups to set them up.

Add an Entra ID user

Entra ID users sign in with the

Sign in with...

button. They must be part of a synced group.

requires role

Make sure the group has a role assigned. Without one, the Dashboard won't work.

Delete an Entra ID user Only Admins

Click the delete icon to remove a user from the Dashboard. This action doesn't remove them from Entra ID.

Distinguish Entra ID users

Entra ID users have no direct role. They get their role from their group.

Edit an Entra ID user's role Only Admins

Entra ID users have no direct role. They get their role from their group. If the group can access a flow, so can the user.

Configure forgot password procedure Only Admins

To use forgot password, create an Entra ID app. Add the Mail.Send permission. OAuth 2.0 uses it to send emails.

Go to

to add the backup email address for 'Forgot password' emails.

warning

The Dashboard may use any email in the tenant as the sender.

Local

The Dashboard manages local users. You can assign roles and delete them at any time.

Add a local user Only Admins

Go to

• Fill in the Username, Email and Password fields.
• Assign a Role to set flow access.

Delete a local user Only Admins

Click the delete icon to remove a user.

Distinguish local users

Local users have a direct role assigned.

Edit a local user's role Only Admins

Click the icon to edit a local user's Role .

Configure forgot password procedure Only Admins

Set up the email server for password resets.

Go to

Forgot password setting	Description
Host	The host address of the email server. For example: "smtp.gmail.com" for Gmail.
Port number	The email server port. Default is 587.
Email key vault key	The Key Vault secret name for the sender email address (bundled with Invictus).
Password key vault key	The Key Vault secret name for the sender email password (bundled with Invictus).
Enable SSL	Enable SSL. Most email providers require it.

Unlocking a user Only AdminsNew since v6.3

Too many failed sign-in attempts lock a user out. System admins can unlock them via the button.