Users
The Users page in the Admin Web UI provides a central interface to manage user accounts that can connect to your Access Server. From here, you can view user details, create new accounts, edit users, and search for specific accounts.
👥 User table overview
When you open the Users page, you'll see a table listing configured user accounts. The table includes:
Username: The account name used to sign in. Blocked users are visually highlighted.
Role: Indicates if the user is an admin or a standard user.
MFA: Displays whether multi-factor authentication is enabled.
Auto-login: Shows if auto-login connection profiles are allowed for the user.
Group: Displays the user group assigned for access control settings.
Each row also includes:
✏️ Edit Button: Quickly edit basic account settings.
⋮ More Button: Access additional actions, including:
Edit
Block/Unblock
Delete
Change Group
Reset Password
Download Profile
Enable or Disable MFA
Set Up MFA
🔍 Search and filter
At the top of the page, you can search by username or use filters to narrow down the list:
Filter by Role: Admin or User.
Filter by Auto-login: On or Off
Filter by Group: Select a specific group.
These tools make it easy to manage large user bases.
⚙️ Customize table view
Click the Table Settings icon to:
Reorder columns (e.g., move Group before Role).
Hide any fields you don't need to see.
Your table layout will stay consistent until you change it again.
➕ Add new user
Use the Add New User button at the top of the page to create a new account. You’ll be prompted to enter the username and (optionally) assign them to a group before proceeding to the detailed user setup page.
Single User Page
Clicking a user from the Users page opens the Single User view, where you can manage that specific user’s settings, access permissions, connection profiles, and connectivity options.
This page is organized into four tabs:
User Settings
Group and User Access Rules
Connection Profiles
Intergroup Connectivity
Note
Some settings inherit their values from the default user or group configuration. These appear dimmed and can't be edited unless you uncheck Use default setting or inherit from group setting to override the setting.
👤 User settings
This tab contains configuration options grouped into three sections:
Permissions
Assigned to group: Displays the user's current group assignment.
User role: Choose between Admin and User.
Allow Auto-login: Enable or disable auto-login for this user.
Authentication
Auth method: Displays the authentication method used (e.g., Local, LDAP, RADIUS, SAML).
Require MFA: Toggle whether the user must use multi-factor authentication.
Networking
IP addressing: Assign a static IP if needed or use dynamic addressing.
DMZ configuration: Set up port forwarding rules for this user.
Configure VPN gateway: Allow the client connecting with this user account to act as a VPN gateway for specified client-side subnets.
Allow access from all server-side private subnets: Check to grant access from all server-side networks.
Allow access from all other VPN clients: Check to allow peer-to-peer access between VPN clients.
🚪 Group and user access rules
This tab lists any user-specific Access Rules that override group-level defaults.
Use the New Access Rule button to define new routing, NAT, or restriction rules specific to this user.
Existing rules can be edited or deleted directly from the table.
📦 Connection profiles
Manage connection profiles available to this user.
View existing connection profiles.
New Connection Profile: Generate a new connection profile for this user with the desired profile type.
New Token URL: Create a profile download URL (useful for auto-deployment or onboarding).
Delete Connection: Remove any obsolete profiles from the server with the delete icon.
🔁 Intergroup connectivity
View the user's inherited group roles.
Select between All, Two-way, or One-way connectivity rules.
If no intergroup rules exist, the message "No intergroup connectivity rules found: is displayed.