Users

Introduction

The Tarsal portal, located at https://app.tarsal.cloud, provides administration capabilities for managing users within your account. Every Tarsal customer has a dedicated organizational account containing users assigned to specific roles.

Roles

Roles define a user’s permissions and allowed functions in the portal, including access to and management of users and features.

Tarsal provides two user role options: Admin and Member.

Admin users have full administrative privileges and can perform any action in Tarsal. The following portal actions are available to Admins:

  • Account management
    • Globally resetting passwords
    • Turning on and off two-factor authentication (2FA)
    • Turning on, off, and configuring SSO
    • Regenerating the API Shared Secret
    • Regenerating, updating, and removing API keys
    • Turning on and off IAM role authentication
    • Viewing and downloading audit logs
  • User management
  • Tarsal features
    • Viewing usage
    • Managing flows
    • Managing sources
    • Managing destinations
    • Managing connectors

Member users have limited rights and no administrative privileges. The following portal actions are available to Members:

  • Account management
    • Viewing and downloading audit logs
  • User management
  • Tarsal features
    • Viewing usage
    • Managing flows
    • Managing source
    • Managing destinations
    • Managing connectors

📘

Account Owners

Tarsal automatically assigns a required account owner. The user who signed up for Tarsal and created the account is an admin and the account owner. Only one owner is allowed.

Owners have access to Owner Tools under Account > Settings. They may transfer account ownership to another admin within their organization or close the customer account

Unlimited users can be added to an account, regardless of their roles. However, each account must have at least one Admin who is an owner.

User Management

The following steps assume you’re an Admin and logged in to the portal.

Adding a User

To add a user, select a role and provide the required information:

  1. Under Account, click Users.
  2. Click the + Add User button on the upper right.
  3. In the modal window
    1. For Role, select Member or Admin from the drop-down list.
    2. For Email, enter the user’s email.
    3. For First Name, enter the user’s first name.
    4. For Last Name, enter the user’s last name.
  4. Click the Save button.

New users receive a verification email from Tarsal to complete their registration. They can’t log in until they verify their email address, and the verification link expires after 12 hours. After clicking the link, they must enter a password to finish and log in.

Admins can resend email verification links if the user isn’t verified. In a user profile, click the Resend Verification link. See Updating a User Profile below for details on changing user information.

Updating a User Profile

To change allowed user profile information:

  1. Under Account, click Users and locate the applicable user in the list.
  2. Click . . . (three dots) under the Action column for that user.
  3. In the drop-down menu, select Edit.
  4. For Role, select Member or Admin from the drop-down list.
  5. Enter a First Name.
  6. Enter a Last Name.
  7. Click the Save button.

❗️

Profile Update Limitations

Regardless of their role, users can’t update the email or role for any user. See Changing User Email Addresses below for more details.

Removing a User

To remove a user:

  1. Under Account, click Users and locate the applicable user in the list.
  2. Click . . . (three dots) under the Action column for that user.
  3. In the drop-down menu, select Remove.
  4. In the modal window, type CONFIRM in the Confirmation field.
  5. Click the Save button.

Users can also be removed by clicking the Delete User button in their profiles. Deleted users aren’t recoverable.

Changing a User's Email Address

For security, Tarsal doesn’t allow changing user emails or roles. Please visit https://support.tarsal.cloud/ to submit a request.

Alternatively, create a new account with the user’s new email address (not already used in Tarsal) and then delete the old account.

User Actions

Admins access advanced management options through the Actions menu on every user profile; actions only apply to that user. The following actions are available:

  • Resending verification emails
  • Sending password reset emails
  • Enabling one-time passwords (OTP)
  • Forcing logouts
  • Blocking users

Resending a Verification Email

If a user deletes their verification email or doesn’t receive it, send another one to facilitate account access:

  1. Under Account, click Users and locate the applicable user in the list.
  2. Click . . . (three dots) under the Action column for that user.
  3. In the drop-down menu, select Edit.
  4. Click the Actions button on the upper right.
  5. Select Email Actions > Resend Verification Email.
  6. In the modal window, click the Send button.

Verified users can’t receive email verifications again.

Sending a Password Reset Email

If a user loses their password, send a reset to recover account access:

  1. Under Account, click Users and locate the applicable user in the list.
  2. Click . . . (three dots) under the Action column for that user.
  3. In the drop-down menu, select Edit.
  4. Click the Actions button on the upper right.
  5. Select Email Actions > Send Password Reset Email.
  6. In the modal window, click the Send button.

Enabling a One-time Password

To turn on two-factor authentication for a user (2FA), enable a one-time password:

  1. Under Account, click Users and locate the applicable user in the list.
  2. Click . . . (three dots) under the Action column for that user.
  3. In the drop-down menu, select Edit.
  4. Click the Actions button on the upper right.
  5. Select Email Actions > Enable One-time Password (OTP).
  6. In the modal window, click the Enable button.

2FA is enabled after users log out; they are prompted to set up 2FA when they log in again.

Forcing a Logout

For security, force a user to log out of all logged-in devices. Tarsal requests credentials on the next access attempt.

  1. Under Account, click Users and locate the applicable user in the list.
  2. Click . . . (three dots) under the Action column for that user.
  3. In the drop-down menu, select Edit.
  4. Click the Actions button on the upper right.
  5. Select Manage > Force Logout.
  6. In the modal window, click the Logout button.

Blocking a User

For security, block a user from accessing Tarsal. Blocking forces users to log out on all devices and prevents them from logging in.

  1. Under Account, click Users and locate the applicable user in the list.
  2. Click . . . (three dots) under the Action column for that user.
  3. In the drop-down menu, select Edit.
  4. Click the Actions button on the upper right.
  5. Select Manage > Block.
  6. In the modal window, click the Blockbutton.

Unblock a user by selecting Unblock User from the Actions menu and clicking the Unblock button in the modal window.