User management is the foundation of access control in CORAS. Every person who interacts with your tenant — from administrators building data structures to analysts running reports to leadership reviewing dashboards — must be added as a user. In CORAS's IL-5 ATO environment, user management ensures audit-traceable access: every action is tied to an authenticated identity, and role-based permissions control exactly what each person can see and do.

User Management — Admin Settings

All user access and permission management— including adding users, creating user groups, and managing access — can be done within the Admin Settings area of CORAS.

Users

The Users tab displays all individuals who have access to your tenant, collection, or node. This includes key details such as:

• Username

• Email Address

• Assigned Role (User or Admin)

How to Add a User (User or Admin)

1. Go to Admin Settings — Users.

2. Click Add User.

3. Fill in the required fields:

   • Full Name

   • Username

   • Email

   • Role: Select User or Admin:

     • User: Access is controlled through group or node permissions.

     • Admin: Has elevated privileges to manage system settings, users, and content.

4. Click Save.

Note: A user must first be added to the system before they can be assigned to a User Group or granted access permissions.

How to Add a CAC User

Note: CAC (Common Access Card) users authenticate using DoD credentials and may require tenant-specific identity configurations.

Implementation-specific steps for adding CAC users should be documented here according to your organization's identity and access management configuration.

User Groups

User Groups allow administrators to manage permissions for multiple users at once. Group-based permissions make it easier to scale access management across the tenant.

How to Create a User Group

1. Go to Admin Settings — User Groups.

2. Click Add Group.

3. Enter:

   • Group Name

   • Description

   • Add Users (users must already be added to the system)

4. Click Save.

Your User Group will now appear and be available for access configuration.

Access Management

The Access Management section is used to assign or restrict access to specific parts of the system, including collections and nodes.

How to Assign Access to a User Group

1. Go to Admin Settings — Access Management.

2. Click Add User Group.

3. Select the group you want to assign.

4. Choose the Collections or Nodes the group should have access to.

5. Select the appropriate Access Level:

   • View — Read-only access

   • Edit — Ability to modify data

   • Manage — Full control over the selected node/collection

6. Click Save.

Note: Permissions can also be assigned or adjusted directly within a CORAS Workspace. This functionality is covered in a separate section of the User Guide.