Account – Users #

The Users section allows Customer Admins to manage the users in their Quality Clouds account, including creating and deactivating users, managing credentials, assigning portal views, and controlling access to projects.

 

What does each item show? #

The user list shows each user’s active status, name and username, global role (Customer Admin, Normal User, or Developer – with project-level roles set separately per project for Normal Users), last login time, SSO enablement, and available actions to edit, delete, or copy the user.

Customer Admins manage the account and every project automatically; Normal Users work within the specific projects they’re assigned to, as either a Project Admin or Project User; and Developers authenticate only through integrations, with no portal access at all.

See Roles and permissions below for the full breakdown of what each role can do.

 

Roles and permissions #

Quality Clouds separates global roles, which define what a user can do at the account level, from project roles, which define what a user can do within a specific project. A user can have different project roles across different projects.

 

Global roles #

Customer Admin #

Customer Admins have full access to the entire account. They automatically have access to every project and do not need to be assigned to individual projects.

Customer Admins can:

• Create, edit, and delete projects.
• Create and delete users.
• Create Rules via the Rule Builder functionality
• Assign users to projects and configure their project roles.
• View aggregated license information across all projects.
• Manage account-level settings, including security, SSO, billing, and licenses.
• Manage schedules and email notifications.
• Manage API keys.
• Manage teams and write-off reasons.
• View global logs.
• Create and manage instances.

 

Normal User #

Normal User is the base account role. A Normal User has no operational access until they are assigned to a project.

Once assigned to a project, their permissions within that project are determined by their Project Role.

A Normal User:

• Cannot access account-level settings.
• Cannot see project data until explicitly assigned to a project.
• Can have a different project role in each project they are assigned to.

  #

Project roles apply to Normal Users and determine what the user can do within each assigned project.

 

Project Admin #

A Project Admin can manage the operational configuration of their assigned project.

Project Admins can:

• Create new instances within their project.
• View and edit existing instances within the project.
• View, create, edit, and delete rules within the rulesets of their project.
• Edit the project role of users already assigned to their project.
• Remove users from their project.

 

Note: Removing a user from a project only removes the project assignment. It does not delete the user’s Quality Clouds account.

Account-wide configuration such as schedules, notifications, API keys, teams, write-off reasons, and user creation remains restricted to Customer Admins.

 

Project User #

A Project User has read-only access by default. Additional operational capabilities can be enabled through user attributes.

Without additional attributes, Project Users can:

• View dashboards and scan results.
• View the rulesets of instances within their assigned projects in read-only mode.

 

Additional capabilities can be enabled through the following attributes:

 

Attribute	Capability
scan_launcher	Launch manual scans
is_approver	Approve peer reviews
can_download	Download reports and artifacts
can_manage_writeoffs	Create and manage write-off reasons

These attributes are configured at the global user level and apply across all projects assigned to the user.

Note:  Rule creation remains unavailable to Project Users in the current implementation.

 

Developer #

A technical integration role with no access to the Quality Clouds Portal — used to authenticate developers into Salesforce integrations instead. See Developer Role in Quality Clouds for how it’s set up on each platform and how to assign it.

 

ServiceNow #

• Developers are automatically created when a user joins a Quality Clouds group in ServiceNow.
• They are not created or invited from the Quality Clouds Portal.
• They do not have portal credentials or portal access.
• They receive an automatically generated token to operate through the ServiceNow application.

 

Salesforce #

• Developers are created manually by a Customer Admin from the Quality Clouds Portal.
• They have credentials and are activated through an email link.
• They do not have access to the Quality Clouds Portal.
• Their credentials are used to connect through the Salesforce application.
• They are assigned to a Salesforce project by a Customer Admin.

 

Permission summary #

Capability	Customer Admin	Project Admin	Project User	Developer
Manage account settings	✓	✗	✗	✗
Create projects	✓	✗	✗	✗
Create instances	✓	✓ (own project)	✗	✗
Edit instances	✓	✓	✗	✗
Create new users	✓	✗	✗	✗
Edit user’s project role	✓	✓ (own project)	✗	✗
Remove user from project	✓	✓ (own project)	✗	✗
View rulesets	✓	✓	✓ (read-only)	✗
Edit / create / delete rules	✓	✓	✗	✗
Manage schedules	✓	✗	✗	✗
Manage notifications	✓	✗	✗	✗
Manage API keys	✓	✗	✗	✗
View dashboards and results	✓	✓	✓	✗
Launch scans	Attribute-based	Attribute-based	Attribute-based	✓
Approve peer reviews	Attribute-based	Attribute-based	Attribute-based	✗
Download reports	Attribute-based	Attribute-based	Attribute-based	✗

 

Adding a new user #

Customer Admins can create new users and configure their account information, credentials, global role, views, and access controls.

1. Log in to the Quality Clouds platform.
2. Go to Admin → Account → Users.
3. Click the + icon to open the new user form.
4. Complete the required user information and configure the appropriate access settings.
5. Click Add to create the user.

 

Account Information #

Enter the user’s first name, last name, and email, select their preferred time format, and set whether they should be created in an active state.

 

Credentials & Security #

Set a username for the user. You can send them an activation link by email, require a password change on next login (Force change), and set a credential expiration period (Expires).

 

Global Role #

Select the user’s account-level role:

• Customer Admin: Manages the account and its users and has access to all projects.
• Normal User: Access is determined by the projects to which the user is assigned and their role within each project.
• Developer: Does not have Portal access. Projects must be assigned for the Developer to work within the corresponding integration in Salesforce. (Copado, Flosum, Visual Studio Code, etc.)

 

Views #

Select the dashboard views that the user can access. Views are configured independently from project and role assignments.

 

Access Controls #

Access Controls provide additional capabilities to the user.

• Scan Launcher: Allows the user to manually launch scans.
• Can Download: Allows the user to download available reports and artifacts.
• Approve Peer Reviews: Allows the user to approve peer reviews.
• Create Rules: Controls the user’s ability to create rules where supported by their role (Customer Admin only)
• Manage Write-Offs (Debt Manager): Allows the user to manage write-offs in Debt Manager (Debt Manager view needs to be assigned)

 

Editing users #

1. Log in to the Quality Clouds platform.
2. Go to Admin → Account → Users.
3. Locate the user using the available filters.
4. Click Edit.
5. Make the required changes.
6. Click Save.

 

Deactivating and removing users #

1. Go to Admin → Account → Users.
2. Locate the user.
3. Deactivate the user using the toggle
4. Click Delete.
5. Confirm the removal.

 

Note: A user must be deactivated before they can be deleted.

 

Removing a user from a project #

Removing a user from a project is different from deleting the user’s account.

A Customer Admin can manage assignments across all projects. A Project Admin can remove users from their own project. Removing the assignment does not delete the user’s Quality Clouds account.

 

Resetting user credentials #

You can reset credentials for existing users.

1. Go to Admin → Account → Users.
2. Identify the user
3. In the Actions menu, click on the “Send activation email” icon