Users

Last updated: October 20, 2026

Users are everyone in your organization who has an Iris account. An administrator adds them, gives each one a role, and optionally places them in groups. This article covers the Users tab. Roles and groups have their own articles, linked at the end.

To open it, click Settings in the sidebar, then Users. You'll land on a section called User Roles and Groups, with three tabs: Users, Roles and Groups. It opens on Users.

Who can make changes

Only administrators, meaning members of the Admins role, can add users, edit them, or reset passwords. Other people with access to Settings may be able to open this page and see the list, but their changes will not save.

The Users list

The Users tab, showing the first rows. Each row has the person, their role and groups, and whether the account is active. Scroll to see the rest.

The Users tab, showing the first rows. Each row has the person, their role and groups, and whether the account is active. Scroll to see the rest.

Each row shows the person's name and email, their Role, their Groups and their Status. Use Search members... to find someone by name or email, and the Active, Inactive and All buttons to change which accounts you see. The list opens on Active. It loads more people as you scroll.

Adding a user

  1. An administrator clicks Add User.

  2. Enter the person's Name and Email.

  3. Pick a User Role. Every person has exactly one role.

  4. Optionally tick one or more Groups.

  5. Click Add User. To back out, close the pop-up with the X in the corner.

Adding someone takes a name, an email, a role and, if you want, groups. Use the X in the corner to close it without adding anyone.

Adding someone takes a name, an email, a role and, if you want, groups. Use the X in the corner to close it without adding anyone.

Iris creates the account as active and emails the person an invitation with a temporary password. They are asked to choose a new password the first time they sign in. Each person's name must be unique in your organization, not only their email. If your organization has a seat limit and you have reached it, Iris tells you and does not add the person.

If you provision people through your identity provider and don't want Iris to send its own invitation, turn off Send invite emails to new users under Settings > Security > Authentication. See Security Settings Guide.

Changing a user's role, groups or status

  1. Click the menu at the end of the person's row and choose Edit. A pop-up titled Edit User opens.

  2. Change the User Role, the Groups, or the Status.

  3. Click Update User, or close the pop-up with the X to leave things as they were.

The Edit User pop-up. Status is the setting you use when someone leaves.

The Edit User pop-up. Status is the setting you use when someone leaves.

You can't edit your own account from this page, so ask another administrator. A role change replaces the old role, and the person's permissions update the next time their page loads.

Marking someone Inactive

Set Status to Inactive when someone leaves your organization or no longer needs access. Iris has no delete for users, so this is how you offboard. Inactive people can't sign in, and they stop counting toward your seat limit. Their information is kept for your records. Questions assigned to them stay assigned, so reassign those before or after you deactivate. See Assignments.

To bring someone back, edit them and set Status to Active.

Resetting a password

Click the menu at the end of the row and choose Reset Password, then confirm. Iris generates a temporary password, emails it to the person and shows it to you as well, with a Copy Password button in case you'd rather pass it along yourself. They choose a new password the next time they sign in. Only administrators see Reset Password. Iris has no separate resend-invitation action, so a reset is also the way to send a new invitation.

Users who sign in with SSO or SCIM

People who sign in through your identity provider using Sign in with SSO are created the first time they sign in. They get the role set as Default provisioning role on the Security page, which is Collaborators unless you changed it.

If you use SCIM, users your identity provider manages show Managed by SCIM under their name. By default, Iris locks them: Edit is turned off and you make changes in your identity provider instead. Administrators can switch the lock off with Lock SCIM-managed users on the Security page. Setup steps are in SSO Setup and SCIM Provisioning Setup.

Roles and groups

A role decides what a person can do in Iris. See Roles in Iris. A group lets you add or assign a whole team at once. See Groups in Iris.

Related articles