> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt. # Users Enterprise Edition **Custom system and organization roles** require JumpServer Enterprise Edition. Built-in roles remain available in Community Edition. [Request 14-day free trial](https://www.jumpserver.com/free-trial) The **Users** page is the user directory for the current organization. It lists every account that can sign in to JumpServer, with filters for disabled, expired, and inactive users, and it provides the actions administrators need most: create a user, invite an existing system user into the organization, import or export a batch, and open a user's detail page. Open the page from **Console > Users**. ![Figure 1: Users list showing quick filters and account columns.](/images/v5/jumpserver/v5_admin_users_01.png) ## Overview The area above the list groups filters into three sets: - **Quick filters**: Invalid, Disabled, Expiration date, and Never logged in. - **Authentication settings**: Password expired, MFA not enabled, and Login blocked. - **Inactive for more than**: 30, 60, 90, or 180 days. The columns are Name, Username, Email, Groups, Active, and Actions. Use the toolbar icons to change columns, export, import, and refresh the list. ## Before you begin - Sign in with a system administrator or organization administrator account. - To deliver password-reset and SSH-key-reset links, configure email in [Notifications](https://www.jumpserver.com/docs/features/system-settings/general/notifications.md) first. Important The list shows only users in the current organization. A user who already exists in JumpServer but has not joined this organization must be added with **Invite user**. ## Create a user 1 Click **Create**. 2 In the **Create user** drawer, fill in the fields described below. 3 Click **Submit**, or **Save and continue adding** to create another user. ![Figure 2: Create user drawer with basic, authentication, security, and other settings.](/images/v5/jumpserver/v5_admin_users_02.png) ### Field reference | Group | Field | Description | | -------------- | ------------------ | --------------------------------------------------------------------------------------- | | Basic | Name | Display name. Duplicate names are allowed. | | Basic | Username | Sign-in name. Must be unique. | | Basic | Email | Used for sign-in and notifications. Must be unique. | | Basic | Groups | Groups the user belongs to. Group authorizations are inherited by members. | | Authentication | Password | **Send reset password link by email** or **Set password**. | | Authentication | MFA | **Disabled**, **Enabled**, or **Enforced**. | | Authentication | Allowed MFA types | Virtual MFA, SMS, Email, Face recognition, Radius, Passkey, or Custom. | | Security | System roles | System-level permissions such as System administrator, Auditor, User, or a custom role. | | Security | Organization roles | Organization-level permissions. Click **Manage roles** to maintain roles. | | Security | Active | When selected, the user can sign in. | | Security | Expiration date | After this date and time the user cannot sign in. | ## Invite a user into the organization 1 Click **Invite user**. 2 In **Invite user to this organization**, select the **User** and the **Organization roles**. 3 Click **Confirm**. For security, the dialog shows only a subset of users; search to find others. ## Import and export Use the toolbar to import or export users. Import can create or update users, accepts CSV and XLSX files up to 10 MB, and works best when you fill in the downloaded template. ## User details Click a user's **Name** to open the detail drawer, with tabs for basic settings, authorized assets, authorization rules, login rules, sessions, and activity. ### Quick actions **Quick update** on the **Basic** tab provides: - **Active**: turn sign-in eligibility on or off. - **Reset password**: send a reset email to the user. - **Reset SSH key**: email a link for setting a new SSH key. - **Reset MFA**: the user must bind MFA again at the next sign-in. - **Unlock user**: unlock an account locked after repeated failed sign-ins. ### User login rules The **User login rules** tab restricts where and when this user can sign in. | Field | Description | | ----------- | ------------------------------------------------------------------------------------------------------------------- | | Name | Rule name. | | Priority | Lower numbers are evaluated first. | | IP group | Comma-separated source addresses. `*` matches all; single IPs, CIDR ranges, address ranges, and IPv6 are supported. | | Time period | The time window in which sign-in is allowed or restricted. | | Action | **Reject**, **Allow**, or **Login review** (sign-in succeeds after approval). | | Active | Whether the rule applies. | ## Row actions and bulk actions The row menu (**...**) provides **Delete** (remove the user from JumpServer; irreversible), **Duplicate** (clone and adjust), and **Remove** (remove from the current organization only; the user can be invited again later). Select the checkboxes in front of one or more users and click **More actions** to remove, disable, enable, edit, or delete the selected users. Warning **Delete** permanently removes user data and cannot be undone. To take a user out of the current organization only, use **Remove**. ## Related topics - [Groups](https://www.jumpserver.com/docs/features/console/users/groups.md) - [Authorizations](https://www.jumpserver.com/docs/features/console/policies/authorizations.md) - [Accounts](https://www.jumpserver.com/docs/features/console/accounts/index.md) - [Login Logs](https://www.jumpserver.com/docs/features/audits/activities/login-logs.md)