User Access Manager

managing user access in charthop charthop's access settings let you automatically invite employees to the platform, manage their access level, and ensure departing employees lose access on their last day — all without manual effort you must have your org chart set up in charthop before configuring user access employees who appear in your org chart still need to be granted access before they can log in navigate to access settings go to access > settings to find all user access configuration options this page is divided into two sections user management and automatically invite users user management the user management section controls session and security settings that apply to all users setting what it does require sign in every sets how frequently users must re authenticate, in days sign out after inactivity automatically signs users out after a set number of inactive days new user invitations expire after controls how long an invitation link remains valid before expiring notify these people of user access level changes select users who should be notified when any user's access level changes automatically invite users this section controls how charthop invites new employees and removes access for departing ones when enabled, charthop will automatically invite new employees when they're added to your org and remove access when they depart primary setting automatically invite new employees and revoke access on departure — check this box to enable automatic access management once enabled, you can configure the options below assign new employees to this role — sets the default role granted to newly invited employees the default is employee , which is the standard access level recommended for most members of the organization employees at this level can see their own personal data and compensation data for individuals in their reporting line advanced options setting what it does send invitations and revoke access once daily (recommended) runs a daily sync to invite any new employees and revoke access for departing ones recommended for most organizations revoke access when employee departs removes access on an employee's departure date as part of the daily sync immediately revoke access when employee departs removes access as soon as a departure is recorded in charthop, without waiting for the daily sync notify these people when a user is invited or access is revoked select users who should receive a notification when invitations are sent or access is removed only invite employees that match this filter restricts automatic invitations to employees who meet a specific filter (e g , dept\ sales) if left blank, all employees with a work email are invited allow employees matching this filter to use password based login allows a subset of employees to log in with a password instead of sso useful for employees who may not have sso credentials send invitations on demand instead of waiting for the daily sync, you can manually trigger the process at any time by clicking invite & revoke now this is the recommended approach for your initial rollout — it lets you invite your full organization at once when you're ready filter examples use filters to control which employees receive automatic invitations filter who it includes employment\ full all full time employees is\ manager all employees who have direct reports dept\ sales all employees in the sales department under\ manager name all employees under a specific manager, including skip levels for a full list of available filter fields and syntax, see charthop's carrot documentation additional notes employees not in your org chart cannot be invited through access settings to invite outside users, go to the users page to change a user's role or grant advanced permissions, use the users page automatic invitations can only assign employee level roles if an employee is missing a work email in charthop, they will be skipped during the sync update their email in their profile and re run the sync or click invite & revoke now