📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Users & Permissions

See everyone who can sign in to Lavawall for your company and your clients, and control what each person can do.

Where to find it
You › Users & Permissions
Who can use it
Super Admin, MSP Client Administrator, or a user who has been given the User Permissions permission
Plan
Included
For
Everyone

What the page is for

This page lists every Lavawall user in your company and, for MSPs, in your client companies. For each person it shows their email, company, whether the account is active or locked, their role, last activity, name, failed sign-in count and which sign-in methods they use.

From here you can add users, lock or unlock an account in one click, edit a user's details and permissions, reset their MFA or password, and permanently delete a user.

The Edit User window holds all per-user settings: details and photo, organization and role, account recovery, feature and module permissions, application elevation rights, vault rights, remote support access and, for Super Admins, admin permissions.

What you see

The Users & Permissions page, with the header buttons, table tools, user table and edit user window numbered 1 to 4.
The Users & Permissions page. Numbers match the list below.
  1. Header buttons: Remote Policy (opens Access Policy, for people allowed to change it) and Add user.
  2. Table tools: Copy, CSV, Excel, Print, Show rows and a search box.
  3. User table: Actions (Edit and delete), Email, Company Name, Locked, Role, Last Activity, First Name, Last Name, Failed Logins and Auth.
  4. Edit User window: user details, Account Recovery, Feature Permissions, Module Permissions, Application Elevation, Vault, Admin Permissions, Governance, Risk and Compliance and Remote Support Access, with Save Changes.

How to lock or unlock a user

  1. Find the user in the table.
  2. Click the Active button in the Locked column to lock the account; it turns to Locked. Click Locked to make it active again.

How to edit a user and their permissions

  1. Click Edit on the user's row.
  2. Update their details, Organization, Role or Account Status.
  3. Turn permissions on or off: Feature Permissions (CRM, Help Desk, Blog, Knowledge Base, Reports, Integrations), Module Permissions (Unrestricted or specific modules), Application Elevation and Vault.
  4. Under Remote Support Access, choose a Remote Access Scope: Use company default, All companies (MSP + clients), Client companies only, Own company only, Specific companies... or No remote access. For specific companies, tick them under Allowed Companies.
  5. Click Save Changes.

How to reset a user's MFA or password

  1. Click Edit on the user's row.
  2. Under Account Recovery, click Reset MFA or Reset Password and confirm. These act straight away; you do not need to click Save Changes.
  3. Reset MFA clears their authenticator, forgets remembered computers and signs them out; they set up a new authenticator at next sign-in and are told by email.
  4. Reset Password stops the current password working at once, signs them out and emails them a single-use link valid for 1 hour. You never see the link or the new password.

How to delete a user

  1. Click the red bin button on the user's row.
  2. Type the user's email address exactly to confirm, then click Delete permanently.
  3. The account, permissions and remembered MFA computers are removed and the user is signed out everywhere. Their activity history is kept for audit. This cannot be undone.

How to export the list

  1. Click CSV or Excel to download, Copy to copy it, or Print.
  2. Use the search box first to export only matching users.

Tips

  • The Auth column icons show Microsoft sign-in, Google sign-in, passkey, password and MFA for each user. A password without MFA is worth following up.
  • A red number in Failed Logins means recent failed sign-in attempts.
  • Vault permissions build on each other: every vault permission includes Use the password vault. Only a Super Admin can grant the recovery key and vault administration permissions.
  • Application Elevation: Module Admin includes Manage Rules, which includes Approve Requests.
  • Turn on May reset other users' MFA or May reset other users' passwords to let a trusted person handle account recovery.

Troubleshooting

  • "You have not added any users yet." Click Add user to create the first one.
  • "You do not have permissions to view this page." Ask a Super Admin to give you the User Permissions permission.
  • There is no Edit or delete button on a row. You cannot edit yourself unless you are a Super Admin, cannot delete yourself, and cannot delete a Super Admin unless you are one.
  • "Not permitted" when changing a permission. You cannot grant more than you hold yourself.
  • Reset buttons are greyed out. Hover over them to see why; you need the reset permission for that user.

Task guides that use this page

Still need help?

Search the support centre, or contact our support team and tell us which page you were on.

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.