Users Overview
The Users section of the Optra Edge Portal lets organization administrators manage who has access to their environment, what those users can do, and how authentication is secured. From here you can invite new users, assign roles, manage API keys for programmatic access, and enforce multi-factor authentication across your organization.
Who can access this section
- Admin users — Full management access: invite users, assign roles, delete users, manage API keys, and enforce MFA.
- All authenticated users — Every user can view and update their own User Profile regardless of role.
The Users tab in the top navigation is only visible to users with the Admin role.
Roles reference
Roles determine what a user can see and do within the portal. Roles are assigned when inviting a user and can be updated at any time by an admin.
| Role | How it is assigned | Description |
|---|---|---|
| Owner | Auto-assigned | Assigned automatically to the user who created the organization. Cannot be manually granted or removed. |
| Admin | Manual | Full control over all portal features, users, settings, and API keys. |
| Billing Admin | Manual | Full access to all operational sections (Workflows, Devices, Skills, Logs) plus the ability to manage credits and billing. Cannot manage users or organization settings. |
| Device Technician | Manual | View and modify devices. |
| Device Enroller | Manual | Enroll new devices into the organization. |
| Workflow Editor | Manual | Create and edit workflows. |
| Workflow Deployer | Manual | Deploy workflows to devices. |
| Chart Editor | Manual | View and modify chart workspaces. |
| Chart Viewer Only | Manual | View charts only. Access to most other portal sections is restricted. |
Role constraints
Exclusive roles: The Admin and Chart Viewer Only roles are mutually exclusive. Selecting either one automatically clears all other roles. An admin has full access by definition; a Chart Viewer Only user has heavily restricted access by design.
Combining roles: All other roles can be freely combined. For example, a user can hold both Device Technician and Workflow Editor simultaneously to cover both operational responsibilities.
Navigation access by role
The following table shows which portal sections are accessible for each role. A user with multiple roles gains the union of all access.
| Section | Owner | Admin | Billing Admin | Device Technician | Device Enroller | Workflow Editor | Workflow Deployer | Chart Editor | Chart Viewer Only |
|---|---|---|---|---|---|---|---|---|---|
| Workflows | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| Devices | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| Skills | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| Charts | ✓ | ✓ | — | — | — | — | — | ✓ | ✓ |
| Users / Admin | ✓ | ✓ | — | — | — | — | — | — | — |
| Logs | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| Notifications | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Support | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Profile | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Users assigned the Chart Viewer Only role are automatically redirected to the Charts page when they log in. They can only access Charts, Notifications, Support, and their own Profile. They cannot access Workflows, Devices, Skills, Users, or Logs.
This role is intended for users who need read-only visibility into chart data and nothing else.
In this section
- Manage Users — Invite, edit, and remove users from your organization.
- API Keys — Generate and manage API keys for programmatic access.
- MFA — Enable or enforce multi-factor authentication.
- User Profile — Manage your personal profile, preferences, and theme.