How do I add new users to the system?

If Azure AD/SSO is enabled (automatic provisioning):

• Add the user to your organization's Azure AD and grant them access to the application (for example, through an Enterprise Application, security groups, or SCIM provisioning).
• Ask the user to sign in to the system once using the designated SSO sign-in URL. The user account will be created automatically upon the first sign-in.
• Open Admin view in Granite → Users or Roles and assign the required roles and responsible-person settings.
• Note: You cannot create the account manually, and permissions cannot be assigned until the user account has been created through the first sign-in or SCIM provisioning.

If manual user accounts are used:

• Open Admin view → Users → Add New User.
• Enter the user's email address and other required information. Make sure an account with the same email address does not already exist.
• Assign the appropriate roles and permissions to the user. If necessary, permissions can be expanded later through the Roles view.
• Save the user. Instruct the user to follow the login instructions sent to their email. If the email is not received, ask them to set a password using the "Forgot your username or password?" link on the login page.

Common tips and troubleshooting:

• The "Add" function does not work or the email field returns an error: The account may already exist in another group or may be deactivated. Search for the user by email address, reactivate the account, and update their roles.
• An external user cannot sign in: Verify that they are using the correct login URL and ask them to use the "Forgot Password?" function if necessary.
• Do not create a new account if you only want to grant additional access to an existing user for another business unit. Instead, add the required roles and permissions through the user's profile or the Roles view.
• The search field is not visible or is obstructed in the user interface: Try another browser, refresh the page, or adjust the browser zoom level. Contact support if the issue persists.
• Removing or deactivating old accounts: Follow your organization's established process or submit a support request if you do not have permission to perform the action yourself.

Updated on: 20/10/2026