This option allows the System Administrator to invite new Administrative Users and Business Users to their organization. Each user will have a specific role assigned in the organization based on which they will have the privilege to maintain the system or interact with New Hires.

What are the roles a System Administrator can assign to the user?

A System Administrator can assign any of these roles to a user that they invite.

User Type	User Roles	Description
Administrative Users	System Administrator	Able to invite Administrative and Business users The first System Administrator must complete the Organization Onboarding Can perform all activities that a Process Administrator or Content Administrator can perform The first System Administrator acts as the connection between the organization and Smart ERP
	Process Administrator	Configures the business process Configures the business rules Can perform all activities that a Content Administrator can perform
	Content Administrator	Can add, modify, and remove content in the system Ensures the correct content, policies, and information are available to be included in the onboarding process
Business Users	Recruiter	Invites New Hires to begin their onboarding process
	HR Specialist	Invites New Hires to begin their onboarding process Manages New Hires onboarding process Reviews the information that New Hires provide Completes required Human Resources activities
	Help Desk Analyst	Assists New Hires with problems in their onboarding process using the Help Desk Console Resend a user's Login information email Lock/Unlock a user's Account Reset a user's Password Reset a user's e-PIN
	I-9 Specialist	Verifies the New Hire's employment eligibility information and documents
	E-Verify Specialist	Initiates and manages the E-Verification process
	Authorized Representative	Cannot invite user from Manage Users/Contacts by exclusively assigning this role. When the user has other Business User roles (HR Specialist, I-9 Specialist, E-Verify Specialist) along with Authorized Representative, the invite can be sent to the user. Authorized Representatives can be invited only from I-9 Section 2/3 when I-9 is assigned to them. For more details, click here to navigate to Authorized Representative page.

To be able to add a new user/contact, the System Administrator must have completed their own Self Registration and User Onboarding, as well as the Organization Onboarding process (if they are the first System Administrator).

Note: Users logging in through SSO will also have the "Add New User/Contact" button enabled on their Manage User setup page so that they can add non system user contacts in their organization. For more information, please refer to the last section on this page.

Who has access to add a new user/contact?

Only users with System Administrator role can add users and contacts to the system.

Roles	Add New User/Contact
System Administrator

How do you access the "Add New User/Contact" button?

There are two ways to access "Add New User/Contact" button as a System Administrator:

2 Ways to Access Add New User/Contact
Menu Icon: The Menu Icon is used to display all relevant actions the current user is able to perform.
Quick Links: If you are user you are able to access this page through the Quick Link 'Manage Users/Contacts.' *Note: your organization can remove this link but it is provided as part of our delivered home page.

Access Via Menu Icon:

Every action a user can perform can be found by using the Menu icon. The Menu icon can be found in the upper left hand corner of the page. Click the Menu icon, and navigate to "Manage Users/Contacts" under Users/Contacts.

Menu

Access Via Quick Links:

On the System Administrator home page, you can select "Manage Users/Contacts" through the Quick Links bar located below the banner photo. These links change depending on the current user's role.

Home Page with Quick Links

Manage Users/Contacts Console

After navigating to the Manage Users/Contacts page, click on the "Add New User/Contact" button.

Manage Users/Contacts Console

What makes up the Invite/Edit User page?

The Invite/Edit User page consists of 4 sections: Personal Information, Roles, Row Level Security and Authorized Lookup Security.

Invite/Edit User Page

Upon entering the phone number, an additional field labelled "Text Message Capable" will be populated below, to indicate if the phone number is capable of receiving text (SMS) messages. This field will be visible only for the USA phone numbers i.e if the country code entered for the phone number is "001". If country code is other than "001", this field will not be visible.

When the checkbox for "Text Message Capable" is selected, the provided phone number will be used for delivering one-time verification code during self-registration and subsequent system logins.

The fields of each section on the Invite/Edit page are explained in detail below:

Personal Information

The following personal information must be entered for the user.

Field	Required	Behavior
System User	Optional	Checked by default Checked: The user can perform activities in the system Unchecked: The user cannot perform activities in the system, but can act as a contact
Group	Yes	Can be used to classify whether the user falls into a specific group "Ungrouped" by default
Account Locked?	-	Will automatically populate based on the user account status Will show as enabled if the user account is locked and disabled if unlocked
First Name	Yes	Enter the user's preferred first name
Last Name	Yes	Enter the user's preferred last name
Email ID	Yes	Enter a valid Email Address Used to send the onboarding email The User must verify this email address as a part of the two step authentication, if it is implemented
Phone	Yes	Displays default USA country code "001" Enter a valid phone number The user must verify this phone number as a part of the two step authentication, if it is from the USA with the country code "001" and indicated as capable of receiving text messages
Text Message Capable	Yes - if only "SMS" is configured as the delivery method for authentication in the system	If checked, provided phone number will be used for authentication purposes for delivering verification codes during self-registration and subsequent logins If unchecked, the provided phone number will not be used for authentication purposes.

Enter First Name, Last Name, Email ID and Phone. If the phone number entered is from the USA (associated with the country code "001"), a checkbox labeled "Text Message Capable" will appear below the Phone field. This checkbox will not appear for the phone numbers other than USA i.e having country code other than "001".

If the user's phone number is capable of receiving text (SMS) messages, indicate this by selecting the "Text Message Capable" checkbox. The designated USA phone number, identified as text message capable, will be used to send the authentication verification code during self-registration as well as subsequent system logins. The phone number will not be considered for the authentication verification, if the "Text Message Capable" checkbox is not checked.

If, at a later instance in their process, the user wants to update their name, email and phone information, they can do so through their profile page.

When USA phone numbers are furnished, users will be forced to check the "Text Message Capable" checkbox if only SMS is the configured as the delivery method for two-factor authentication. If this checkbox is not selected, the following error message will be displayed upon saving the profile or inviting the user.

All the values entered in the personal information fields are validated and appropriate messages are displayed in case of invalid values. Some of the validations are given below:

If required fields are not entered

First Name/Last Name validations:

When invalid characters are entered in the name fields

Email ID validations:

when '@' or '.' is missing

when character is missing between '@' and '."

only one character exists after '.'

invalid characters entered in the email domain

invalid character is entered in the email address

two '@' signs are entered in the email ID

Phone validations:

when phone number is not in number format

Phone number is not 10 digits

Onboarding - Roles / Smart I-9 E-Verify Roles

The following role or roles must be defined for the user. A user can be assigned more than one role from the below list.

Field

Behavior

Smart Onboarding - Roles (Required)

Defines the role of the user:

System Administrator
Process Administrator
Content Administrator
Recruiter
HR Specialist
I-9 Specialist
E-Verify Specialist
Help Desk Analyst
Authorized Representative (Cannot exclusively assign this role to the user. This role can be assigned by combining with other Business User roles)

Minimum Role Requirement: Each of these following roles must be assigned to at least one user. The other roles are available, but not required.

System Administrator
HR Specialist
I-9 Specialist
E-Verify Specialist (if using E-Verify)

When "System User" is checked, a role must be assigned to the user. Otherwise, following error message will be displayed.

If the same role is assigned again to the user for the same product, the below message will be displayed when saving the user profile or inviting the user.

Note: System users can also be added with no role assigned when creating an invitation. Later, the user's profile can be modified to add the onboarding/Smart I-9 E-Verify roles. For more details on modifying the user's profile, please click here.

Row Level Security

The System Administrator is required to enter all fields in the Row Level Security Section. These define the range of the user’s interactions. These fields will determine the consoles that appear in the 'Authorized Security Lookup' section.

Field	Behavior
Company (Required)	Enter or Search for the Security Group that is associated with the Company attribute Used to define the Company(s) with which the user will be able to interact
Business Unit (Required)	Enter or Search for the Security Group that is associated with the Business Unit attribute Used to define the Business Unit(s) with which the user will be able to interact
Department (Required)	Enter or Search for the Security Group that is associated with the Department attribute Used to define the Department(s) with which the user will be able to interact
Location (Required)	Enter or Search for the Security Group that is associated with the Location attribute Used to define the Location(s) with which the user will be able to interact

In the lookup any Security Group that has been defined for the corresponding attribute can be specified. This allows the System Administrator to define the scope of the user as required.

Security Group Look Up for Business Unit

*Note: All fields default to allowing access to all values.

Authorized Security Lookup

The System Administrator has the option to enter a value for any of the fields in the Authorized Security Lookup. This section uses Security Group look ups, just as the fields in Row Level Security. If a value is entered, the user only sees the attribute values that are associated with the specified Security Group when they are prompted for the attribute.

Role

Effect of Security Group Lookup Fields

System Administrator

Process Administrator

Content Administrator

Will alter the values shown in the Attribute Revisions

HR Specialist

Recruiter

Will alter the values shown on the New Hire Invitations

The following fields can have authorized security lookup.

Field (Optional)*
Action
Reason
Regular/Temporary
Full/Part Time
Company
Business Unit
Department
Location
Operating Unit
Job Code
Employee Class
Appointment Type
Client ID
Pay Group
Salary Plan
Salary Grade
Employee Type
Comp. Frequency
Comp. Rate Code
Earnings Code
Tax Location Code
Employment Agreement
Hire Template
User Defined Attribute

*Note: All fields default to allowing access to all values.

Save and Invite

There are two ways that a System Administrator can invite a user:

Way to Invite User to system	Description
Click Invite at the bottom of the 'Invite/Edit User' page	This option should be used if you want to invite the user immediately.
Click Save at the bottom of the 'Invite/Edit User' Page, then click Invite at a later time.	This option should be used if you want to add the user to the system, but launch the invitation at a later time.

Note: In SSO based Organizations (users logging in through SSO), the users will not have the ability to invite users through Manage Users/Contacts but can create non-system users. For more details on creating non-system users, please refer to last section on this page.

If you have saved the invitation without inviting, you can invite the user at a later time. Navigate to 'Manage Users/Contacts', search for the user you saved, click on "Actions", and then click "Invite".

The Onboarding Status for the invitations that are not launched will be in "Invitation Created" status.

Click on 'Yes' to confirm the action.

The following message confirms the invitation has been sent to the user.

The Onboarding Status of the user's invitation changes from "Invitation Created" to "Invitation Launched" in the Manage Users/Contacts page.

When the user completes self registration, the Onboarding status will be changed to "'Invitation In Progress". Please click here to refer to the self registration process.

After completing User Onboarding, the user status will be updated to "Invitation Complete". For more details on User Onboarding, please click here. Note: If the user is the initial System Administrator for the organization, then the user must also complete Organization Onboarding after User Onborading. For more details on this process, please click here.

How to limit a user's access to candidate data in consoles and dashboards?

To limit a user's access to candidate data in consoles and dashboards, customize the row-level security based on the specific attribute for Company/Business Unit. This configuration can be established during the creation of a new user or modifying an existing user.

Based on the requirement, security can be set up for Company/Business unit, to ensure that the user has limited access to data as mentioned in the row level security. Row level security can be established for an existing security group or by creating a new security group. For more details on creating a security group, please click here.

An example of row level security defined for Company attribute is given below.

What happens when a system user is added with no roles assigned?

In this example, a user is created with "No Role Assigned" option in the Onboarding roles.

The above created user details will be shown under Manage Users/Contacts.

User details in Manage Users/Contacts

Since no roles are assigned to the user, there will not be any activities seen when the user login into the system after completing the self-registration.

If the user need to complete their pre-boarding activities, they need to click on the user name on the top right corner of the menu and select "My User Onboarding" option.

In this case, the user will be able to complete their pre-boarding activities, but cannot perform any tasks until a role is assigned to them.

How to add a non-system user or a support contact for the organization?

A non-system user cannot perform any activities in the system, but can be added as a support contact in the organization. When this user's contact ID is added as support contact in the Organization Management, the information associated with the user (name, phone and email) shows as contact information in system emails that are sent out to the users. To create the Contact ID for this user, you need to first add the user in Manage Users/Contacts.

Click on 'Add New User/Contact' button provided on the top right corner of the Manage Users/Contacts page.

On 'Invite/Edit User' page, enter the user details (First Name, Last Name, Email ID and Phone) leave the "System User' checkbox unchecked and save. There is no need to enter the user roles for non-system users.

Note: You may also enter the roles if needed.

This generates a Contact ID for the user as shown below:

Manage Users/Contacts

Now, add the above generated Contact ID in 'Support Contact' field in the Organization Management and save.

This adds the user as support contact in the organization and the details associated with the user will be included in all the system generated emails.

A sample email is given below:

Email sent out to the user when password is successfully changed

What are Contact Attributes?

Any additional information that you want to save about the user can be added in Contact Attributes.

When you click on the "Contact Attributes" button, a page will open to add the information. Enter Field Name and Field Value as given below.

Click on "Add Contact Attribute" if more rows have to be added.

Click "OK" to save the changes. This will navigate back to the user profile page. Save the user profile or invite the user as needed.

Can you invite users with only Authorized Representative role?

Users with only Authorized Representative role cannot be invited through Manage Users/Contacts. When the user details are created with only "Authorized Representative" role, the following error will be displayed on the page when the user is invited.

Note: However, users can be invited as Authorized Representatives from Manage Users/Contacts if they have other Business User role(s) such as HR Specialist/I-9 Specialist/E-Verify Specialist.

Error message

In this case, the user invitation can only be saved but inviting the user with exclusive Authorized Representative role is not possible. Users with exclusive Authorized Representative role can be invited only when an I-9 is assigned to them from I-9 Section 2/3. For more details, please click here.

When an I-9 is assigned and invitation is sent to an Authorized Representative from I-9 Section 2/3, the user details will be visible under Manage Users/Contacts as shown below. Through Manage Users, System Administrators can perform actions and manage the user account.

How users logging in through SSO can add new users/contacts?

The users logging in through SSO will have a "Add New User/Contact" button on the Manage User Setup page to add contacts. This option supports creating non-system users with contact details (email and Phone number) but no roles and security. It is useful when SSO users need to create non system users to add as support contacts in the organization. For details on adding non-system users please refer to the above sections.

Add a New User/Contact