Skip to main content

System Administration

Each instance of Tangram Pro™ instance has at least one System Administrator. System Administrators can view and manage users, administer licenses, and change instance-wide settings for their Tangram Pro installation in the Admin Portal.

How to access the Admin Portal#

  1. Log in to Tangram Pro™ as a System Administrator
  2. Click on Admin Portal on the Navigation Bar

The System Administration Dashboard will display.

Image104

System Administration Dashboard#

The System Administration Dashboard displays the total number of users and total number of seats, or licenses, in your installation of Tangram Pro™.

Image105

User Administration#

System Administrators can view a list of all instance users by clicking on the Users link in the Admin Portal menu. System Administrators can view details about each user, including the date of last login, their 2FA status, and system user role. This is also where System Administrators can suspend or delete a user and manage user passwords and user role.

Image106

Manage Users#

System Administrators can manage user passwords, status, and roles from the Users List. The User Management Dropdown is accessed by hovering over a user's list item.

Image107

Reset User Passwords#

System Administrators can set a new, temporary password for any user in the instance

How to reset a user password#

  1. Hover over a user's list item and click Reset Password
  2. Type a new password in the reset modal and click Reset Password

The modal will close, and the entered password will be applied to the user's account. Previous password is no longer valid.

Image108

Change User Roles#

System Administrators can grant and revoke Administrative access to other users in their Tangram Pro™ installation.

How to manage a user's Administrative role#

  1. Hover over a user's list item
  2. Click on the carat icon next to Reset Password
  3. Click Promote to Admin (or click Revoke Administrator Access if the user is an admin)
  4. In the confirmation modal, click Promote to Administrator (or Revoke Administrator Access)

The modal will close, and the user's status will update immediately.

Image109

Suspend a User#

Suspending a Tangram Pro™ user is a reversible action a System Administrator may use to revoke a user's access to Tangram Pro™ without deleting their account or its associated data. Suspended users are no longer able to log in to the instance.

Suspended users do not require licenses. When a System Administrator suspends a user, a license is freed, and the suspended user's seat is available.

How to suspend a user#

  1. Hover over a user's list item
  2. Click on the carat icon next to Reset Password
  3. Click Suspend User
  4. In the confirmation modal, click Suspend [User]'s Account

The modal will close, and the user will be suspended. The user will no longer be able to log in to Tangram Pro™ and their user will be greyed out in the Admin Portal.

Image110

Reactivate a Suspended User#

A System Administrator may reinstate a suspended user, enabling them to log in to the instance and cannot access all of their data using their existing Tangram Pro™ account.

Reactivating a user requires that at least one license is available in the Tangram Pro™ instance. If all licenses are in use, the SysAdmin must add more or free an existing license by suspending or deleting another user in the instance.

How to reactivate a user#

  1. Hover over a suspended user's list item and click Reactivate User
  2. In the confirmation modal, click Reactivate [User]'s Account

The modal will close, and the user will be reactivated. The user will be able to log in to Tangram Pro™ and their user will be shown as active in the Administration Dashboard.

Image111

Delete a User#

important

Deleting a Tangram Pro™ user is a permanent action which removes a user's account and data from the instance. Deleted users are no longer able to log in to the instance and their account is removed entirely.

Users who are Team Owners cannot be deleted unless there is another owner for their team or the ownership of their team is transferred to another user in the instance.

Deleted users no longer use licenses. When a System Administrator deletes a user, their license is freed and their seat becomes available.

How to delete a user (when the user is not an Owner of a team with no other owners)#

  1. Hover over a user's list item and click on the carat icon next to Reset Password
  2. Click Delete User
  3. In the confirmation modal, click Delete [User]'s Account

The modal will close, and the user will be deleted. The user will no longer be able to log in to Tangram Pro™ and their user will be removed from the Administration Dashboard.

Image112

How to delete a user (when the user is an Owner of a team with no other owners)#

  1. Hover over a user's list item
  2. Click on the carat icon next to Reset Password
  3. Click Delete User
  4. Click in the Transfer Ownership field and type the name of another instance user
  5. Click Select next to the user to whom team ownership will be transferred
  6. Click Transfer Ownership and Delete

The modal will close, and the user will be deleted. The user will no longer be able to log in to Tangram Pro™ and their user will be removed from the Administration Dashboard. Ownership of the team is now transferred to the user selected in step 5.

Image113

License Management#

Tangram Pro™ System Administrators can review details about current licenses and add more in the Licensing section of System Administration.

Image114

The License Information section displays the total number of seats the instance has, how many seats are currently in use, how many suspended users exist in the Tangram Pro™ instance, the date and time at which the instance's current licenses will expire, and the ability to upload new licenses.

Suspended users do not have licenses assigned to them and are not included in the Seats in Use count.

Upload Licenses#

Tangram Flex provides new licenses in a file sent to System Administrators. These licenses are added to the instance by clicking Upload New License.

How to upload licenses to Tangram Pro™#

  1. Click License from the System Administration menu
  2. Click Upload New License. This will open your computer's file selector.
  3. Select the License File and click Open

Your file selector will close, and the new licenses will be added to your Tangram Pro™ instance. The Seats Count and the expiration date and time will update to reflect the licenses available and expiration details in the new file.

Tangram Pro™ does not currently allow the purchase or generation of licenses from within the product. Please contact license@tangramflex.com for questions and support.

Instance Settings#

Instance-wide configurations are managed in the Settings section of System Administration. The changes made in Instance Settings affect the entire installation of Tangram Pro™. System Administrators have access to settings that control user signup and authentication and can configure email notifications here.

Image115

Two-Factor Authentication#

Tangram Pro™ supports Two-Factor Authentication (2FA) as an optional level of security. By default, 2FA is not required for Tangram Pro™ users, but may be enabled should they choose to do so.

Users must have access to a second device and an authenticator application like Google Authenticator or Authy to enable 2FA.

System Administrators can opt to require 2FA for all users of their Tangram Pro™ instance. This will require all existing users to enable 2FA the next time they log in to their accounts and will require all new users to enable 2FA during signup.

Image116

note

The System Administrator must enable 2FA for their own account in order to access this setting.

How to require 2FA for a Tangram Pro™ instance#

  1. Click on Settings in the System Administration menu
  2. Click on the Require 2FA Toggle button

The toggle button and its message will update. Two-Factor Authentication is now required for every user of your instance and will have to be configured the next time they log in.

###S User Signup

Tangram Pro™ provides a Sign Up page for new users by default. This means that any person who navigates to your Tangram Pro™ instance can create an account. If your environment requires more control over user signup, or if you prefer to directly add users for license management purposes, you may disable this page.

Image117

How to disable user signup#

  1. Click Settings in the System Administration Menu
  2. Click on the Enable Signup Toggle Button

The toggle button and its message will update. The sign up page will no longer be accessible.

Domain Whitelisting#

System Administrators can specify which email domains are acceptable for user accounts and for all emails sent out from their Tangram Pro™ instance, user invitations sent by SysAdmins.

If no are domains specified, user accounts can be created using any email domain. Invitations to Tangram Pro™ and notifications may be delivered to any email address.

How to whitelist email domains#

  1. Click Settings from the System Administration menu
  2. Click in the Whitelisted Domains Text Field and type in the email domain(s) you wish to allow to be used for account creation, user invitations, and delivery of email notifications
  3. Click Update Domains

The Whitelisted Domains will be updated. An email address with one of the specified domains will be required when creating an account during signup and when adding users through System Administration. Email notifications will not be delivered to any email address that does not use a whitelisted domain.

tip

If whitelisting multiple email domains, separate the domain list items with a comma

Image118

SMTP Email Configuration#

Tangram Pro™ supports the use of SMTP for routing notification and invitation emails. If your organization has a hosted SMTP server, you can enable SMTP in Instance Settings and configure Tangram Pro™ to direct all notification emails to your server.

Image119

How to set up SMTP configuration for Tangram Pro™#

  1. Click Settings from the System Administration menu
  2. Click on the Enable SMTP Configuration Toggle
  3. Enter your server *Host, Port, Send From, Username, and Password *credentials
  4. Click Test Send -- this will send a test email to the address associated with your Tangram Pro™ account
  5. Click Update Email Configuration

The configuration is now saved and will be used for all emails in your Tangram Pro™ instance.

LDAP Configuration#

If you have an existing system for managing user authentication over LDAP, you can enable and configure it to be used for Tangram Pro™ authentication.

Configuring LDAP disables Tangram Pro™ sign up, and all non-LDAP users will need to be added manually by a SysAdmin.

All domains used for your LDAP users' email addresses must be whitelisted in Tangram Pro™.

How to configure LDAP for Tangram Pro™#

  1. Click Settings from the System Administration menu
  2. Click on the Enable LDAP Configuration Toggle
  3. Enter your server Host, Port, Domain Base, User ID, User Name, User Email, and optional Bind credentials if you choose
  4. Enter your LDAP username and click Test Connection
  5. Click Update LDAP Configuration

The configuration is now saved and can be used for Tangram Pro™ user authentication.

Image120