Admin: How To Manage User Access | Cordel Connect User Guide

Overview

There are two ways a user account can be created in Cordel Connect:

Invitation: An administrator sends an invitation to a user. The user receives an automatic notification and creates their account by accepting the invitation.
Access Request: A user submits a request for access. An administrator reviews and approves the request, and an account is created.

Each workflow requires certain permissions and is managed separately in the Administration area.

Permissions required to manage user access

Access Requests

Permission	Description
AccessRequests: Can Manage All	Full access to all access request functions
AccessRequests: Create	Submit access requests
AccessRequests: Read	View access requests
AccessRequests: Update	Approve or deny access requests
AccessRequests: Delete	Delete access requests

Invitations

Permission	Description
Invitations: Can Manage All	Full access to all invitation functions
Invitations: Create	Send invitations
Invitations: Read	View invitations
Invitations: Update	Modify invitations
Invitations: Delete	Delete invitations

Roles

When inviting or accepting a new user, administrators will need to assign a permission role to that user.

Role	Internal?	Inherits from	Effective permissions
Basic	No	—	Read-only (`BasicReadPermissions`) Notification updates Filter-set creation
CompanyAdmin	No	Basic	Selected CRUD (Create, Read, Update and Delete) permissions - e.g. companies without delete permissions, users without create permissions, jobs, missions Admin portal
Admin	No	CompanyAdmin	All CRUD (Create, Read, Update and Delete) permissions Admin portal, Impersonation Job migration
CordelAdmin	Yes	Admin	Everything (`AllPermissions`)

1. How to send an invitation

Administrators can invite users directly. The user receives an automatic email notification and creates their account by accepting the invitation.

To send an invitation

Navigate to Administration > Invitations.
Select Send an Invitation.
Enter the user's email address, name, role, and company.
Select Send.

The invitation appears in the Invitations list. The user must accept before the account is active.

The Invitations Page

Column	Description
Name	The invited user's name
Email	The invited user's email address
Roles	The role assigned to the user
Status	Current status of the invitation
Created Date	Date and time the invitation was sent
Company	The company associated with the user
Usage Date	Date and time the invitation was accepted

Invitation Status

Status	Meaning
AlreadyUsed	The invitation has been accepted and the account is active
Expired	The invitation was not accepted within the required timeframe

Search and Filter

Filter	Description
Email address, name	Search by name or email
Date created from	Show invitations sent on or after this date
Date created to	Show invitations sent on or before this date

Select Submit to apply filters. Select Reset to clear all filters.

To reinvite a user

Where an invitation has expired, a Reinvite button appears in the Usage Date column. Select Reinvite to send a new invitation to that user.

To delete an invitation

Select the delete icon next to the entry. This removes the invitation from the list.

2. How to review an access request

When a user submits a request for access, it appears in the Access Requests page for an administrator to review. Company Administrators with the ‘update’ permission for access requests are also notified when a request is created that they have permission to manage. The notification appears as a Notice-level alert and includes the requester's name and email address. Clicking the notification opens the Access Requests page.

The Access Requests Page

Column	Description
Name	The requester's full name
Email	The requester's email address
Job Title	The job title provided by the requester
Message	Any message included with the request
Matched Company	The company matched to the requester's email domain
Request Received	Date and time the request was submitted
Status	Current status: Waiting, Approved, or Denied

Search and Filter

Filter	Description
Name	Search by requester name
Email	Search by email address
Status	Filter by request status
Company	Filter by matched company

Select Submit to apply filters. Select Reset to clear all filters.

To action a request

Locate the request in the Access Requests list.
Select the appropriate action next to the requester's name:
- Approve (tick): grants the user access
- Deny (cross): rejects the request
- Delete (bin): removes the request from the list

To action multiple requests at once, select the checkboxes next to the relevant entries and use the Actions dropdown.

Request Status

Status	Meaning
Waiting	Received, awaiting review
Approved	Approved; user has been granted access
Denied	Request rejected

Access Request Configuration

The Access Request workflow requires the feature to be enabled and at least one allowed email domain to be configured per company. Both steps are performed by a Cordel administrator.

Step 1: Enable the functionality

Ask your Cordel Account Manager to enable the Access Request functionality.

Once enabled, the Request access link becomes visible on the login page.

Step 2: Configure allowed email domains

Allowed domains determine which email addresses can submit an access request. Requests submitted from an email address that does not match a configured domain are not generated.

Each company must have its allowed domains configured separately.

To add accepted email domains for access requests:

Go to Admin > Companies.
Select your company.
Open the Access Request Email Domains section.
Add the domain or domains of email addresses that are permitted to request access.

Where multiple domains are configured, a request is accepted if the email address matches any one of them.