Users and permissions management
  • 17 Jul 2024
  • 9 Minutes to read
  • Contributors
  • Dark
    Light
  • PDF

Users and permissions management

  • Dark
    Light
  • PDF

Article summary

Intro

Paradigm provides predefined user groups (a.k.a. roles) as described below, but it also allows the flexibility to create custom groups tailored to specific needs. This enables administrators to define and manage access controls and permissions that best suit their organizational requirements.

Roles and associated permissions

User

Basic user role for general access to Paradigm’s primary features without administrative privileges. Access to core functionalities of the platform without the ability to make significant changes to system settings or manage other users.

Example: Arthur is user of company LightOn, member of workspace Business, and workspace CSM. When uploading a doc, he can share it with the whole company, the workspace Business, the workspace CSM or only with himself (personal workspace)

Users permissions details

Front-End Access:

  • Interface Access: Simple Users can access the front end of the platform but do not have access to the admin interface. There is no admin link in the top-right menu for these users.
  • Chat Interface: They can use the chat interface, with or without document support, and interact with the available models specific to their company.

Task Builder:

  • Prompt Usage: They can use existing prompts and create new prompts within the Task Builder.
    Can edit/delete only the tasks they have created.

Dashboard and Analytics:
Personal Analytics: Simple Users can view and consult the dashboard and analytics but can only see statistics related to their own profile and usage.

API Key Management:

  • API Key Creation: They have the ability to create API keys for their use within the platform.

Document Management:

  • Document Access: Simple Users can view the list of documents available in the platform.
  • Restrictions: They cannot upload or delete documents within the document database.

User Profile:

  • Association: Each Simple User is associated with a single company. They cannot be associated with multiple companies but may belong to one or multiple workspaces within their company.
  • Customization: Users can manage their personal information, including changing their password.

Doc manager

Role designed with permissions for document management. Can manage documents within the platform, having more control over the document repository compared to a simple User.

Example: If I’m doc manager of the company I have all permissions on all docs of the company, if I’m doc manager of one or more workspaces I have all permissions on docs of these workspaces (esp. deletion).

Note

Doc manager role is currently only implemented at the company level. This means that a doc manager has full permissions on all docs from all workspaces within its company.

Document manager permission details

Front-End Access:
Interface Access: Document Managers can access the front end of the platform but do not have access to the admin interface. There is no admin link in the top-right menu for these users.
Chat Interface: They can use the chat interface, with or without document support, and interact with the available models specific to their company.

Task Builder:
Prompt Usage: They can use existing prompts and create new prompts within the Task Builder.
Can edit/delete only the tasks they have created.

Dashboard and Analytics:
Personal Analytics: Document Managers can view and consult the dashboard and analytics but can only see statistics related to their own profile and usage.

API Key Management:
API Key Creation: They have the ability to create API keys for their use within the platform.

Document Management:
Document Access and Control: Document Managers have the same access as Simple Users with the addition of the ability to upload and delete documents within the document database.
Document List: They can view, add, and remove documents through the document management page and dedicated workflows.

User Profile:
Association: Each Document Manager is associated with a single company. They cannot be associated with multiple companies but may belong to one or multiple workspaces within their company.
Customization: Users can manage their personal information, including changing their password and viewing their account creation date and last login date.

Company Admin

Role designed to provide full administrative capabilities within a specific company. Can manage users, documents, settings, and analytics across the entire company, ensuring control and organization of its. No control over other companies.

Company Admin permissions details

Front-End and Admin Access:

  • Interface Access: Company Admins have access to the full front end of the platform and the company-wide admin interface. They see the admin link in the top-right menu.
  • Chat Interface: They can use the chat interface, with or without document support, and interact with the available models specific to their company.

User Management:

  • Company User Management: Company Admins can manage all users within their company, including adding, editing, and removing users.
  • Role and Permission Assignment: They can assign roles and permissions to any user within the company.

Document Management:

  • Document Access and Control: Company Admins can upload, edit, and delete documents within the company.
  • Document List: They can view, add, and remove documents through the company document management page.

Task Builder:

  • Prompt Usage: They can use/edit/delete existing prompts and create new prompts within the Task Builder, specific to their company.
  • Has full rights to all tasks within their companies, regardless of who created them.

Dashboard and Analytics:

  • Company Analytics: Company Admins can view and consult the dashboard and analytics related to their entire company. They have access to usage statistics for all users within their company.

API Key Management:

  • API Key Creation: They have the ability to create API keys for their use within the company.

Configuration Management:

  • Company Settings: Company Admins can customize settings and configurations specific to their company, such as themes, logos, and other company-wide settings.

Workspace Management:

  • Workspace Oversight: Company Admins can create and manage workspaces within their company, ensuring that access and resources are appropriately distributed among different business units.

User Profile:

  • Association: Each Company Admin is associated with a single company and has administrative privileges across all workspaces within that company. They do not have access to data or settings from other companies.
  • Customization: Users can manage their personal information, including changing their password and viewing their account creation date and last login date.

Super Admin

Role with the highest level of permissions, has full administrative access across all companies and system functionalities. This role can manage the entire platform, including users, documents, settings, analytics, and overall system configuration. Super Admins have the most comprehensive control and oversight capabilities.

Super Admin permissions details

Full System Access:

  • Interface Access: Super Admins have unrestricted access to the front end and the full admin interface, including the admin link in the top-right menu.
  • Global Chat Interface: They can use the chat interface, with or without document support, and interact with all available models across the platform.

User Management:

  • Global User Management: Super Admins can manage users across all companies, including adding, editing, and removing users.
  • Role and Permission Assignment: They can assign roles and permissions to any user within the platform, including other Super Admins.

Document Management:

  • Global Document Access and Control: Super Admins can upload, edit, and delete documents in any company or workspace.
  • Document List: They can view, add, and remove documents from the entire platform.

Task Builder:

  • Prompt Usage: They can use/edit/delete existing prompts and create new prompts within the Task Builder, applicable across the entire platform.
  • Has full rights to all tasks within their company, regardless of who created them.

Dashboard and Analytics:

  • Global Analytics: Super Admins can view and consult dashboards and analytics across all companies and workspaces. They have access to all usage statistics and can generate comprehensive reports.

API Key Management:

  • Global API Key Creation: They can create, manage, and revoke API keys for any user or company within the platform.

Configuration Management:

  • Global Settings: Super Admins can customize system-wide settings and configurations, including themes, logos, and other platform-wide settings.

Company and Workspace Management:

  • Create and Manage Companies: Super Admins can create new companies, assign company owners, and manage existing companies.
  • Workspace Oversight: They can create and manage workspaces within any company, ensuring proper organization and access control.

Audit and Compliance:

  • Activity Logs: Super Admins have access to detailed logs of user activities and system changes, ensuring compliance and accountability.

User Profile:

  • Global Association: Super Admins are not limited to any single company or workspace and have full access across the entire platform.
  • Customization: They can manage their personal information, including changing their password and viewing their account creation date and last login date.

Creating a single User (manually)

  1. Access the Admin Panel: Go to Paradigm Admin.
  2. Fill in User Details: Enter username, password, last name, first name, and email.
  3. Select Company: Choose the user's company from the drop-down menu.
    • Note: Users can interact only with documents from their company. Create a new company if it's not listed.
  4. Company Owner: Mark the user as a company owner to grant them access to aggregated chat analytics.
    • Note: Assign only one owner per company.
  5. Save and Assign Permissions: Click 'Save', then find the user in the list to assign appropriate permissions. Standard chat access requires adding the user to the 'User' group.
    By default the user is marked as 'active'. Unchecking 'active' deactivates the account but retains data.

Creating multiple Users (import a CSV list of users)

The Bulk User Creation feature allows you to create multiple users simultaneously on the Paradigm platform by importing a CSV file. Follow the steps below to successfully create users in bulk.

  1. Create a CSV File :
    Before you start, it's essential to ensure that your CSV file meets the required format and constraints. You can download this sample CSV file use as a template.

test import user paradigm - Feuille 1.csv

  1. Log in to your Paradigm admin account.
    Navigate to the "Users" section in the admin dashboard.

ImportUserCSV.gif

  1. Click the Import Button

  2. Browse and select the CSV file you prepared in Step 1.

  3. From the available options, select the file type of your uploaded file (CSV, XLS, or XLSX).

  4. Choose the company where these users should be created from the provided list.

  5. After uploading the file and selecting the file type and company, you will see a preview of the users being created.

  6. Finalize User Creation: Once you confirm everything is correct, finalize the user creation process.
    The users will be created, and they will receive an invitation email.

Default User Role

During bulk creation, all users are assigned the default role of "User"

Assigning a User to a Company

  • From User Profile: In the admin panel, select the company from the drop-down in the user's profile.
  • From Company Page: You can also add users from the company's page. Ensure not to remove other users inadvertently.

Logging In to Paradigm

Enter your username and password. Contact support for login issues.

Resetting a Password

Password reset is available through the admin panel. Go to the user's profile and use the reset form. Alternatively the user can directly use the forgot my password on login page.

Deactivating a User

To deactivate a user, uncheck the 'Active' box in their profile in the admin panel.


Was this article helpful?