Note: Some Gridium accounts do not yet have user management features enabled. If you’re looking for these settings but they’re not available, please contact support@gridium.com.
The Security tab in your account settings lets account admins control how new users join your Gridium account. You’ll find it at account settings (gear icon), under the Security tab. Only account admins can see or change these settings.
User approval settings
The user approval settings control what happens when a full user invites someone new to the account. There are three options to choose from:
- Require admin approval for all new users. Every invitation from a full user goes into a pending queue and waits for an account admin to approve or deny it. This is the strictest setting and gives you a checkpoint on every new user before they get access.
- Automatically approve all users. Invitations from full users take effect immediately, with no admin review. This is appropriate for accounts where everyone is trusted to manage user access on their own, but it means there’s no checkpoint on who gets in.
- Automatically approve any user from specific domains, but require approval for all others. The middle option, and the most common choice. When a full user sends an invitation, the new user’s email domain is checked against a list you maintain. Domains on the list are approved automatically; everyone else goes to the pending queue.
When you select the third option, a Domains field appears below it where you can enter the email domains that should be auto-approved.
Invitations sent by an account admin always take effect immediately, regardless of which option you’ve selected.
In all cases, full users are only able to invite new users to the buildings they already have access to. If the new user needs access to other buildings, an account admin or Gridium will need to adjust their settings.
The Domains field
The Domains field accepts a list of email domains separated by spaces. For example:
domain.com test.com acme.com
Domains are matched on the part of the email address after the @ sign, so gridium.com matches both joel@gridium.com and support@gridium.com.
Use this list for any email domain you trust to add new colleagues without per-invitation review. The most common pattern is to add your company’s primary email domain so that anyone with a matching email address can be added without delay. You can also add domains for trusted partners or vendors who manage their own users on your account.
When you’ve finished making changes, click Save to apply them.
Recommended setup
For most accounts, the third option offers the best balance of security and convenience. Set it up like this:
- Select Automatically approve any user from specific domains, but require approval for all others.
- Add your primary company email domain to the Domains field.
- Optionally add domains for trusted partners or vendors who manage their own users on your account.
- Click Save.
With this setup, colleagues at your company can be added without delay, while invitations to outside email addresses still get reviewed before access is granted.
For details on what happens after an invitation is sent and how the pending queue works, see Inviting users to your account.