Team Access

Manage user access and roles within your Entity.

Any user accessing the Paxos Dashboard must be authorized and assigned one or more Roles, each of which consists of specific permissions that control access to various actions. Paxos provides a set of predefined roles that are available as soon as you sign up and onboard a new Entity.

• To view, search and manage user access: Admin > Team Management > Users.
• To audit the list of permissions associated with a Role: Admin > Team Management > Roles
• To disable user access or change Roles, use the Edit Status dropdown in the User Actions menu at Admin > Team Management > Users.

Organization Membership

Users can only belong to one organization at a time. If a user needs to join a different organization, they must first be removed from their current organization before accepting an invitation to the new organization.

Passkey-Based Login

Demo

Entity Managers can manually invite users and assign their roles. Each user receives an email with a verification code and a link to set up their passkey and sign in.

Users can have different roles across different Entities. When inviting users, it is recommended to provide organization-specific instruction on the proper use and storage of passkeys.

We recommend using tools like iCloud Keychain, Windows Hello, Google Account, 1Password, Proton Pass, or other third-party password manager that enables passkey sync across devices.

Follow these steps to invite users to your entity:

1. Go to Admin > Team Management
2. Click Invite Users

4. Enter one or more emails and select a role from the dropdown.
5. Click Invite Users

Users are marked as Active once they log into the Dashboard.

Entity Managers can also modify User Roles as needed:

1. Go to Admin > Team Management>Users
2. Click on the Edit Role icon next to a user.
3. Select one or more roles from the dropdown.
4. Click the Save icon next to the dropdown.

SSO-Based Login

Demo

Interested in using SSO?

Paxos supports SAML and OIDC supported Identity Providers. Contact Support to get started.

When using Single Sign-On (SSO), instead of inviting users individually, an Entity Manager uses the Role Mapping interface to map Roles to user groups within your organization’s Identity Provider (i.e., Okta, Azure AD).

Typically, you work with your IT team to leverage existing groups; however, you may need to add new Identity Provider groups to match your expected Dashboard workflows. Once you map the group to an existing Dashboard Role, the next time users sign in with SSO their permissions will update.

Follow these steps to map Identity Provider groups to Paxos Dashboard Roles:

1. Go to Admin>Team Management>Mapping.
2. Click Add Mapping.
3. Enter the Group Name exactly as it appears inside your Identity Provider’s configuration.
4. Enter one or more Roles to associate with this Group.

Any user with a user attribute that contains the Group will automatically be assigned the associated Role on login.

Remove Users from Organization

Entity Managers and Organization Administrators can remove users from the organization. This is necessary when a user needs to leave the organization to join another one, since users can only belong to one organization at a time.

Follow these steps to remove a user:

1. Go to Admin > Team Management > Users
2. Find the user you want to remove
3. Click on the User Actions menu (three dots) next to the user
4. Select Remove User from the dropdown
5. Confirm the removal

Once removed, the user can accept invitations to join other organizations.