Skip to main content

How to Manage Users

User management lets you add team members to your property, assign roles that control what they can access, and remove users when they leave.

Viewing current users​

  1. Click Users in the left sidebar.

  2. You will see a list of all users for your property, showing their name, role, and status.

Adding a new user​

  1. On the Users page, click the Add User button.

  2. Fill in the user details:

    • Username -- a unique login name for the user.
    • Email -- for password resets and report delivery.
    • Role -- select the appropriate role (see below).

  3. Click Create User. The new user receives credentials to log in.

Understanding roles​

RoleWhat they can do
StaffView inventory, create transfers, view reports, use AI chat. Cannot manage locations or users.
Location ManagerEverything Staff can do, plus configure alerts for their staff.
Tenant AdminEverything above, plus manage locations, manage users, and configure all settings.
Corporate AdminCross-brand analytics and consolidated reporting across all properties. Does not manage day-to-day inventory.

Editing or removing a user​

  1. Click on a user in the list to open their detail view.

  2. Update their role or information as needed, then click Save.

  3. To remove a user, click Deactivate or Delete. Deactivated users can be reactivated later; deleted users are permanently removed.

note

Only Tenant Admins can add, edit, or remove users. If you need user management access and do not have it, contact your organization's admin.

Securing your account with multi-factor authentication (MFA)​

Any user can add an extra layer of security to their own login with an authenticator app.

  1. Go to Settings > Security.
  2. Click to enable multi-factor authentication and follow the setup steps:
    • Scan the displayed QR code with an authenticator app (Google Authenticator, Authy, 1Password, etc.), or enter the secret key manually.
    • Enter the 6-digit code from your authenticator app to verify and enable MFA.
  3. From then on, you'll be asked for a code from your authenticator app after your password each time you sign in.

You can disable MFA from the same Settings > Security page if needed.

Single sign-on (SSO) for enterprise organizations​

If your organization uses an identity provider such as Okta, Azure AD, or Google Workspace, ReRoute AI can be configured to let your team sign in with that provider instead of a separate ReRoute AI password.

  • SSO is configured per organization (SAML 2.0 or OIDC) by the ReRoute AI team working with your IT administrator -- it is not a self-service toggle in the app today. Contact your account team to set it up.
  • Once SSO is enabled for your organization, a "Sign in with [your provider]" button appears on the login screen for your users, alongside the regular email/password option.
  • Your identity provider can be configured to automatically assign new users a default ReRoute AI role when they first sign in.

Automated user provisioning (SCIM)​

For enterprise organizations, ReRoute AI also supports SCIM 2.0, so your identity provider can automatically create, update, and deactivate ReRoute AI user accounts as your team changes -- instead of an admin adding or removing each user by hand in this app. SCIM provisioning is set up by the ReRoute AI team as part of your SSO configuration; talk to your account team if you'd like to enable it.