1. Expel Help Center
  2. Getting Started with Expel
  3. Workbench Setup
  4. Activation and User Management

Add and Manage Users in Workbench

This topic covers how to manage users in Expel Workbench, as well as how to resolve first-time login issues. 

Prerequisites

  1. All users must install an authenticator application such as Duo or Google Authenticator on their smartphone or other portable device with a built-in camera, or log in via SSO. Expel requires non-SSO users to set up their Workbench account with multi-factor authentication (MFA) and to use it every time they log in.
  2. You must have organization admin permissions in Workbench to manage users.

Quick Links

Add a User Account

Adding users to Workbench allows other members of your organization to monitor the status of your environment. Before you add a user, make sure you know the level of access the user needs ( organization analyst or organization admin). Administrator rights should not be assigned to everyone. Learn more about user role rights in Expel Workbench.

If your organization uses SSO for logins, you must make sure that every new Workbench user is also assigned the Workbench app in your SSO provider. To configure SSO in Workbench, go to Connect Your Single Sign-On Tools and follow the instructions for your provider, then return to this setup guide.

To add a user to your organization:

  1. Log in to Workbench.

  2. Select Organization Settings > Users.

  3. In the upper right, select Add User.

  4. The Add User screen appears. Complete the following:

    • Email/Username - this must be an email address.

    • Organization - select the organization this user should have access to. If you don't have multiple organizations, this list isn't available.

    • First name - the user's first name.

    • Last name - the user's last name.

    • Workbench user role - select Organization Admin or Organization Analyst role for this user. Keep in mind that Organization Admin gives full administrator rights to your organization's Workbench.

    • Assignable - select if you want this user to be assigned alerts, actions, or investigations. For example, an analyst needs to see these. An admin may not need to see them.

  5. Select Save.
  6. SSO logins only - you must now also add (or ask someone at your organization to add) the Workbench app to the SSO platform for the user.

The new user account will appear with a "Locked" status until it is activated. After the user activates their account, the status will change to "Active" or "Assignable" based on the settings you chose.

Edit a User Account

To edit user information or settings:

  1. Log in to Workbench.

  2. Select Organization Settings > Users.

  3. Select the dropdown arrow next to the user whose account you want to edit.

  4. Select View and edit.

  5. Select Edit User to make necessary changes.

  6. Select Save.

Lock or Unlock a User Account

  1. Log in to Workbench.

  2. Select Organization Settings > Users.

  3. Select the dropdown arrow next to the user you want to lock or unlock.

  4. Select Lock or Unlock, depending on their current status.

  5. The account status changes accordingly. (There is no confirmation message.)

    • Note: If a user's status reads "Locked - Re-enrollment sent" on their page, it means the user needs to check their email for an activation invitation. For instructions, see Activate your Workbench account.
      user-locked-not-activated.png

Delete a User Account

If you perform this action, account access is revoked immediately and permanently. The account no longer appears in the list. However, the user's activity history is still available.

  1. Log in to Workbench.

  2. Select Organization Settings > Users.

  3. Select the dropdown arrow next to the user you intend to delete.

  4. Select Delete user.

  5. Select Delete.
  6. Workbench confirms the action with a "Successfully deleted user" message in the lower right.

Resolve First-Time Login Issues

SSO Users

SSO users must have the Workbench app added to their SSO platform by an administrator at your company. Their Workbench account must also use the same email address that is used by that platform.

  1. First, verify that the user has the Workbench app in their SSO platform and that they have used the app (not a URL) to try to log in.
    • If they do not see the app, contact the appropriate support person at your organization to get it added.
  2. If they do have the app but their login is failing, check their account in Workbench.
    • Log in to Workbench.
    • Select Organization Settings > Users.
    • Look for the user and verify that their email address matches the email used for their SSO platform.
    • If it does not, use the arrow to select View and edit and then select the Edit User button to update their email address.

If the user is still unable to log in after following these steps, contact support for help.

Non-SSO Users

Non-SSO users should have received a "Welcome to Expel" email that includes a link to activate their account. 

  1. First, verify that the user tried to access their account via the link in the Welcome email (not via a Workbench URL).
    • If they cannot find the Welcome email, continue with this process.
    • If the link did not work, contact support for help.
  2. Log in to Workbench.
  3. Select Organization Settings > Users.
  4. Look for the user.
    • Verify with the user that their email address is the one you see listed in Workbench. 
    • If you need to update the user's email address, use the arrow to select View and edit and then select the Edit User button to update their email address, then return to the list of users.
    • Use the arrow to select Resend enrollment email.

If the user is still unable to log in after following these steps, contact support for help.

  • Was this article helpful?

  • 1 out of 2 found this helpful

Related articles