Create a User

Step-by-step guide to creating a new user account in octoja and assigning permissions.

Written By Erdinc Akay

Last updated 14 days ago

Users are the people who sign in to octoja. You can create accounts for your IT team members or for customer contacts who need access.

Before you start

  • You need the User Management permission (users.manage, granted via groups under Administration → Groups). User accounts are created in the admin area — if you do not see Administration → Users, ask an administrator to grant this permission or to create the account for you.
  • Decide whether this user should sign in with a local password or through Microsoft SSO.

Steps

  1. Go to Administration → Users in the left sidebar.
  2. Click the Add User button.
  3. Fill in the user details:
FieldRequired?Description
EmailYesThe user's email address — this is also their username for login
First NameNoDisplayed in the UI alongside the email
Last NameYesDisplayed in the UI alongside the email
PasswordNoSet a password for local login (minimum 8 characters). Set at least an initial password even for SSO users — a new user needs it to sign in the first time and link their own Microsoft account (they can remove it afterward).
Confirm PasswordOnly if password is setRe-enter the password. Must match the Password field exactly, or the form will not submit.
  1. Click Add to create the user.
  2. Assign the user to groups so they receive the right permissions. On the Edit User page, tick one or more groups under Groups — for example, "Technicians" or "Help Desk" — then click Save (or press Ctrl+S) to apply the change.

The following walkthrough shows creating a user and assigning them to a group:

Click Add User in the sidebar; complete the Add User dialog (email, first name, last name, optional password, confirm password); click Add; then on the Edit User page, tick a group under Groups and click Save.

Password vs SSO users

Login typeHow it works
Local passwordUser signs in with their email and password on the octoja login page
Microsoft SSO (OIDC)User clicks "Continue with Microsoft" on the login page. No octoja password is needed.

A user without a password can only sign in once their Microsoft account is linked — and linking has to be done from a signed-in session. So give a new SSO user an initial password, have them sign in and link Microsoft themselves, then optionally remove the password afterward — see Sign in with Microsoft (SSO).

Tip: For stronger security on local password accounts, ask the user to enable two-factor authentication (TOTP) after their first login — see Enable Two-Factor Authentication for a User.

What permissions does the user get?

octoja uses a group-based permission model. Users do not have permissions directly — they inherit them from the groups they belong to. If a user belongs to multiple groups, they get the combined permissions of all groups.

See Assign Permissions for the full list of available permissions.