Add, edit or delete Cirro users, set and reset passwords, and perform any administration tasks.

Before you start

View Cirro Users

  • Click Users & Roles then View all users.

You can tab between Cirro Users, Directory Users and Connected Users.

Cirro Users

You’ll find all your Cirro managed users on this page.

Column Description Possible Values See also
Name Account name of the user. Defined in User Security Policy ALTER POLICY
Email email address of user to send account setup, password reset messages username@domain.com  
Identified by Password setup. ‘password’ is a standard password, ‘totp’ is a Timed One Time Password, and ‘both’ is both standard and totp password/totp/both  
2F Provider For two-factor authentication. Can be used with any combination of password type duo
okta
saaspass
unloq.io
Add Authentication
Status Displays account status Active/Disabled/Pending QR Code Validation Disable Account
Failed Attempts How many login attempts have failed x ALTER POLICY
Last Login Date of last user login. YYYY-MM-DD HH:MM  
Modified Date Date user account was last modified YYYY-MM-DD  

Directory Service Users

When a Directory Service user logs into Cirro, it’s recorded on this read-only page.

Click Refresh to see updated information.

Column Description More Information
User Directory user account name  
Authentication Provider The provider name setup in Manage Authentication Providers. Configure LDAP Provider

Configure Azure AD Provider
First Login The date the user logged in for the first time. This registers the user in the system.  
Last Login Date the user logged in the last time, either directly on the user interface, or via a SQL Client.  
Session Count Number of login sessions Active Sessions Log

Sessions History Log

Connected Users

Any users with connections or pending connections are listed on this page. It’s a more detailed view of the Connection Log.

Column Description More information
User User account  
Status Connection status, either CONNECTED or PENDING.  
Group    
IP address Originating IP address. This can be useful to know for IP Access Rules. About Access Rules
Authentication Provider Corresponds to the NAME column in View Authentication Providers. Manage Authentication Providers
Provider Type Corresponds to the TYPE column in View Authentication Providers Manage Authentication Providers
Session The session ID found in the Session Log. Active Sessions Log

Sessions History Log
Login by Time period in seconds a user has left to perform Multi Factor Authentication on their first login attempt. This corresponds to the Authentication Timeout field on the Advanced tab of the Authentication Provider.  
Reconnect by Time in seconds a user has to gain another session before a Multi Factor Authentication request is made again. This corresponds to the Cache Expiry Timeout field on the Advanced tab of the Authentication Provider.  

Add Cirro Users

There’s three ways to onboard your users to Cirro:

Edit User Accounts

When you edit a Cirro user account, you can make changes to password types and email address.

Disable Account

Disable a user account to prevent login without deleting the account.

  • Click Users & Roles then View all users.

  • Click Disable Account.

  • Click Yes on the confirmation message.

Reset Password/Enable Account

You’ll need administrator privileges to perform these steps.

  • Click Users & Roles then View All Users.

  • Find the user account then click Reset Account

  • Click Yes on the confirmation message.

The system emails the user account with:

  • A temporary password,

  • A link to login and set a new password.

  • A link for a new QR code if Cirro Timed One-Time password is set.

Set Like Another User

Duplicate an existing user roles, Cirro privileges and datasource credentials.

  • Click Users & Roles then View all users.

  • Click Set Like Another User.

  • Enter the user account name to duplicate.

  • Toggle db credentials, cirro privileges or roles on or off as required.

  • Click Ok

Set Database Credentials

Make changes to database login credentials assigned to a user.

  • Click Users & Roles then View all users.

  • Click Set database credentials.

Click to open the credential dialog.

  • Choose the Datasource.

  • Enter the appropriate username and password.

  • Click Add Credential.

Assign Roles

Cirro comes with built-in roles, and you can create your own.

  • Click Users & Roles then View all users.

  • Click Assign Roles

Now grant roles from the left column or revoke them from the right.

  • Tick individual permissions then use the single arrow keys to grant or revoke them.

  • Use the double arrow keys to grant or revoke all permissions.

  • Click Ok when you’re finished.

Delete User

Permanently delete a Cirro user from the system.

  • Click Users & Roles then View all users.

  • Click Delete.

  • Click Yes on the confirmation message.

See Also