User management UI and common tasks

New user model

This doc is about managing users on our New Relic One user model.

This doc explains how to find and use the user management UI and how to do some common user management tasks.

Requirements

The easiest way to see what your user management permissions are is to go to the user management UI and see what you have access to.

Some user management requirements and restrictions:

This doc is about managing users on the New Relic One user model.
Most user management capabilities require the Authentication domain manager role and some require the Organization manager role. For details, see Standard roles.
To manage groups, roles, and access grants, Pro or Enterprise edition is required.
A New Relic user is prohibited from sharing their login with other people. A New Relic user can have a maximum of either three concurrent active sessions, or three unique IP addresses in use at any given time.
To avoid configuration conflicts, try to ensure that only one person in your organization is managing users at a time.

User management UI

For users on the New Relic One user model, to find your user management options: From the account dropdown, select Administration. There are two user management UI pages there:

User management: Use this to add users, update user type, manage what groups a user is assigned, and approve user upgrade requests.
Organization and access: Use this page to create and manage groups, roles, and access grants, and to set up SAML SSO and SCIM provisioning.

Want to see videos of the user management UI in action? See our user management videos.

Important

If you can't see these UI pages, it may be because you're on our original user model or because you don't have the required user management role.

Common user management tasks

In the Organization and access UI, you can create access grants, custom groups, custom roles, and configure an authentication domain.

Here are some example user management procedures:

Before changing your users’ user type, we recommend you understand:

How to decide a user's user type
How billable users are calculated
User downgrade rules
If you're using automated user management, you have other options for managing user type.

To change the user type of one or more users:

From the User management UI, click the checkboxes for the users whose user type you want to edit.
Once you start selecting users, an option will appear for Edit type.

You can also edit the user type and group of a specific user by clicking on that user.

To manage how users upgrade their user type, see the authentication domain settings.

To grant your users the ability to manage other users, you'll need to add users to a group that has the Authentication domain manager and Organization manager role.

You have two options:

From the User management UI, you can add a user to the default Admin group, which includes both of those roles.
OR
You can create a custom group and assign it these roles. For a tutorial on creating new access grants, groups, and roles, see the user management tutorial.

Track changes

To see an audit log of changes to your account, including user management actions, you can query the NrAuditEvent.

New user model

Requirements

User management UI

Important

Common user management tasks

Add, edit, and delete users

Edit user type (basic, core, full platform)

Export a spreadsheet of users

Give users access to accounts and roles (access grants)

Create new custom groups and roles

Set up SAML SSO and/or SCIM provisioning

Grant users ability to manage other users

Control how users upgrade their user type

Track changes