In this article

This article walks through utilizing the Organization Users panel in the dashboard to create and edit DNSFilter account user permissions, including updating the account owner and resetting account users' two-factor authentication. 

DNSFilter account user types

The DNSFilter dashboard supports five types of users:

Dashboard User notes

➡️ There is no limit to the amount of users which may be added to the dashboard.

➡️ Once SSO is enabled, add new users via the SSO configuration—the Add User button is disabled.

➡️ If a user's email address already has an associated DNSFilter account, there are two things to note about adding them to an Organization:

• Their display name will always match the initial account's name. To update the name, login with that email/password to make the change
• The user will not receive an invitation email notification. When they login the new Organization will be available from the Organization drop down menu 

➡️ A checkmark icon appears next to users who have accepted their invitation. This makes it easy to quickly verify which users have joined the organization.

➡️ Users with more restrictive roles like Read Only or Policies Only have hidden dashboard tabs and panels, e.g. the Integrations panel or the Data Export tab under Tools are not visible. 

Update account owner 

To update the account owner,  a second user with Super Admin or Admin permissions must be created to transfer ownership to. The reason a new user must be created is that email addresses are permanently bound to accounts in the dashboard.

Only the account owner can transfer ownership of the account, using these steps:

Without SSO enabled:

1. From the DNSFilter dashboard, navigate to Organization and select Users
2. Add the new account owner with Super Admin/Admin permissions 
   1. Select Add User
   2. Enter their contact information
   3. Select Super Admin/Admin for their role
   4. Select Save
3. Confirm the future owner can login without issue
4. Select Change Owner
   
   
    
5. Select the new owner from the drop down menu
6. Select Submit

Account ownership is now transferred.  

With SSO enabled:

In order to change the account owner when SSO is enabled, the SSO configuration must be deleted, account ownership transferred, and the new account owner then re-enables SSO.  Before proceeding with these steps, read through the warnings associated with adding and deleting SSO found in our SSO configuration guide.   

1. From the DNSFilter dashboard, navigate to Organization and select Settings
2. Tab to Single Sign-On
3. Delete SSO. IMPORTANT: Do not log out of the DNSFilter account
   ⛔️ This removes access to all other account users until re-enabled by the new account owner
4. Follow the steps above to change the account owner
5. Login as the new owner and enable SSO
   1.  Remember to update the vanity URL if applicable so users can sign in

Once SSO is enabled dashboard users will regain access. 

Resend user invitation

Account users with Admin permissions or higher can resend an organization invitation to a user by selecting the envelope icon under Actions.