For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt, and this page is available as Markdown at https://www.jumpserver.com/docs/features/console/users/index.md.
🎉 JumpServer v5.1.1 is available. See what's new →
  • v5

    • Users

    Enterprise Edition

    Custom system and organization roles require JumpServer Enterprise Edition. Built-in roles remain available in Community Edition.

    Request 14-day free trial

    The Users page is the user directory for the current organization. It lists every account that can sign in to JumpServer, with filters for disabled, expired, and inactive users, and it provides the actions administrators need most: create a user, invite an existing system user into the organization, import or export a batch, and open a user's detail page.

    Open the page from Console > Users.

    Figure 1: Users list showing quick filters and account columns.

    Overview

    The area above the list groups filters into three sets:

    • Quick filters: Invalid, Disabled, Expiration date, and Never logged in.
    • Authentication settings: Password expired, MFA not enabled, and Login blocked.
    • Inactive for more than: 30, 60, 90, or 180 days.

    The columns are Name, Username, Email, Groups, Active, and Actions. Use the toolbar icons to change columns, export, import, and refresh the list.

    Before you begin

    • Sign in with a system administrator or organization administrator account.
    • To deliver password-reset and SSH-key-reset links, configure email in Notifications first.
    Important

    The list shows only users in the current organization. A user who already exists in JumpServer but has not joined this organization must be added with Invite user.

    Create a user

    1

    Click Create.

    2

    In the Create user drawer, fill in the fields described below.

    3

    Click Submit, or Save and continue adding to create another user.

    Figure 2: Create user drawer with basic, authentication, security, and other settings.

    Field reference

    GroupFieldDescription
    BasicNameDisplay name. Duplicate names are allowed.
    UsernameSign-in name. Must be unique.
    EmailUsed for sign-in and notifications. Must be unique.
    GroupsGroups the user belongs to. Group authorizations are inherited by members.
    AuthenticationPasswordSend reset password link by email or Set password.
    MFADisabled, Enabled, or Enforced.
    Allowed MFA typesVirtual MFA, SMS, Email, Face recognition, Radius, Passkey, or Custom.
    SecuritySystem rolesSystem-level permissions such as System administrator, Auditor, User, or a custom role.
    Organization rolesOrganization-level permissions. Click Manage roles to maintain roles.
    ActiveWhen selected, the user can sign in.
    Expiration dateAfter this date and time the user cannot sign in.

    Invite a user into the organization

    1

    Click Invite user.

    2

    In Invite user to this organization, select the User and the Organization roles.

    3

    Click Confirm.

    For security, the dialog shows only a subset of users; search to find others.

    Import and export

    Use the toolbar to import or export users. Import can create or update users, accepts CSV and XLSX files up to 10 MB, and works best when you fill in the downloaded template.

    User details

    Click a user's Name to open the detail drawer, with tabs for basic settings, authorized assets, authorization rules, login rules, sessions, and activity.

    Quick actions

    Quick update on the Basic tab provides:

    • Active: turn sign-in eligibility on or off.
    • Reset password: send a reset email to the user.
    • Reset SSH key: email a link for setting a new SSH key.
    • Reset MFA: the user must bind MFA again at the next sign-in.
    • Unlock user: unlock an account locked after repeated failed sign-ins.

    User login rules

    The User login rules tab restricts where and when this user can sign in.

    FieldDescription
    NameRule name.
    PriorityLower numbers are evaluated first.
    IP groupComma-separated source addresses. * matches all; single IPs, CIDR ranges, address ranges, and IPv6 are supported.
    Time periodThe time window in which sign-in is allowed or restricted.
    ActionReject, Allow, or Login review (sign-in succeeds after approval).
    ActiveWhether the rule applies.

    Row actions and bulk actions

    The row menu (...) provides Delete (remove the user from JumpServer; irreversible), Duplicate (clone and adjust), and Remove (remove from the current organization only; the user can be invited again later).

    Select the checkboxes in front of one or more users and click More actions to remove, disable, enable, edit, or delete the selected users.

    Warning

    Delete permanently removes user data and cannot be undone. To take a user out of the current organization only, use Remove.