> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pingtree.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management

> Invite and manage users in your organization — configure roles, security settings, IP restrictions, and multi-organization access all from one place.

## Overview

The **User Management** section gives administrators full control over who has access to the Pingtree platform and what they can do. From here you can invite new team members, configure security settings, manage roles, and monitor user activity.

Navigate to **Settings > Users** to access this section.

***

## User List

The main user list displays all members of your organization in a searchable, sortable table.

| Column         | Description                                         |
| -------------- | --------------------------------------------------- |
| **Name**       | The user's full name                                |
| **Email**      | The user's login email address                      |
| **Role**       | The assigned role (Admin, Manager, User, or custom) |
| **Status**     | Active or Inactive                                  |
| **Last Login** | Date and time of the user's most recent login       |
| **2FA**        | Whether two-factor authentication is enabled        |

Use the **search bar** to find a user by name or email. Filter by role or status to narrow the list.

***

## Inviting a New User

1. Click **+ Invite User**.
2. Enter the user's **email address**.
3. Select their **role** from the dropdown.
4. Optionally assign them to a **user group**.
5. Click **Send Invitation**.

The user will receive an email invitation with a link to set up their account. The invitation expires after 7 days — you can resend it if needed.

> **Tip:** You can invite multiple users at once by entering multiple email addresses separated by commas.

***

## Managing Pending Invitations

Pending invitations are shown in a separate tab until the user accepts and completes registration.

| Action     | Description                                                               |
| ---------- | ------------------------------------------------------------------------- |
| **Resend** | Send the invitation email again if the user missed it or the link expired |
| **Cancel** | Revoke the invitation so the link can no longer be used                   |

***

## Editing a User Profile

1. Click on a user's name or the **Edit** button in the actions menu.
2. Update their profile details:

| Field                      | Description                                                  |
| -------------------------- | ------------------------------------------------------------ |
| **First Name / Last Name** | The user's display name                                      |
| **Email**                  | Login email (changing this updates the login credential)     |
| **Role**                   | Assign or change the user's role                             |
| **Profile Image**          | Upload a photo for the user's account                        |
| **Advertiser**             | Link the user to a specific advertiser account if applicable |
| **Assigned Managers**      | Define which managers oversee this user                      |

3. Click **Save**.

***

## Activating and Deactivating Users

* **Deactivating** a user immediately blocks their access to the platform without deleting their data or activity history.
* **Reactivating** restores access with the same role and settings as before.

To change a user's status, open their profile and toggle the **Active** switch, or use the actions menu in the user list.

***

## Deleting a User

1. Open the user's actions menu.
2. Click **Delete User**.
3. Confirm the deletion in the dialog.

> **Note:** Deleting a user is permanent. Their account is removed, but historical data (leads, reports, activity logs) associated with their actions is retained for record-keeping. Consider deactivating instead if you may need to restore access later.

***

## Two-Factor Authentication (2FA)

You can enforce two-factor authentication for individual users regardless of whether they have opted in themselves.

### Forcing 2FA for a User

1. Open the user's profile.
2. Enable the **Force 2FA** toggle.
3. Save the change.

The next time that user logs in, they will be required to enroll in 2FA before accessing the platform.

***

## IP-Based Login Restrictions

Limit where a user can log in from by whitelisting specific IP addresses. This is useful for ensuring remote contractors or sensitive accounts can only be accessed from known locations.

### Enabling IP Restrictions

1. Open the user's profile.
2. Enable **IP Login Restriction**.
3. Add one or more IP addresses or CIDR ranges.
4. Save.

If a user attempts to log in from an IP not on the whitelist, access is denied.

> **Important:** Before enabling IP restrictions, make sure you have the correct IP addresses. Locking yourself out of your own account will require an admin to remove the restriction.

***

## Auto-Logout

Configure an automatic logout timeout for users who are inactive for a set period. This is useful for shared workstations or high-security environments.

1. Open the user's profile.
2. Set the **Auto-Logout** duration (e.g., 30 minutes, 1 hour).
3. Save.

After the specified period of inactivity, the user is automatically logged out and must re-authenticate.

***

## Multi-Organization Access

A user can belong to more than one Pingtree organization. This is useful for agencies or networks managing multiple brands from a single login.

### Enabling Multi-Org Access

1. Open the user's profile.
2. Enable the **Multi-Organization Access** toggle.
3. Select the additional organizations this user should have access to.
4. Save.

The user will see an organization switcher in the top navigation after logging in.

***

## User Groups

User Groups let you organize users into logical teams (e.g., "Sales Team", "Media Buyers", "Finance"). Groups make it easier to assign campaigns and manage access in bulk.

1. Go to **Settings > Users > User Groups**.
2. Click **+ New Group**.
3. Name the group and add users to it.
4. Save.

Groups can then be assigned to campaigns as a whole, rather than adding individual users one by one.

***

## Selection Settings

Users can have saved selection preferences (such as default date ranges or report filters). These are stored per user and persist between sessions. Admins can reset these from the user's profile if a user encounters display issues related to their saved state.

***

## Admin Impersonation

Admins can switch to any user's view for troubleshooting purposes, seeing exactly what that user sees without needing their credentials.

1. Open the user's profile.
2. Click **Impersonate User**.
3. Confirm the action.

You will be switched into that user's session. A banner at the top of the screen indicates you are in impersonation mode. Click **Exit Impersonation** at any time to return to your own account.

> **Note:** All actions taken during impersonation are logged and attributed to the admin who initiated the session, not to the user being impersonated.

***

## Support Team Access

Each user account has a **Support Access** flag that controls whether the Pingtree support team can view that user's account when troubleshooting issues.

* **Enabled**: The support team can access this account to diagnose problems.
* **Disabled**: The support team cannot access this account; the user must resolve issues independently or share data manually.

Toggle this setting from the user's profile. It is enabled by default for all users.