Skip to main content
Skip table of contents

Users

Picturepark uses accounts and an Identity Server to identify users. Accounts control only whether the account holder may connect to Picturepark to access and edit that user's profile. Once connected, the Roles and Permission Sets of the account determine access to content and other parts of the system.

Pictureparks Identity Server handles the account registration. If a user has an identity server account, then that user can log in to other Picturepark systems. Their identity server account stays linked to their Picturepark account. The Administrator of the Picturepark can then choose whether or not to approve the user and what roles to assign.

Single users do not have permissions in Picturepark, but only through the role, they belong to. 

Create a User

Create a User

  1. Go to Users.

  2. Select + (Create).

  3. Enter the required user credentials.

Create user and assign roles.

You can choose not to Invite user immediately by turning off the toggle at the end of the page. By default, newly created users get an invitation email.

If you turn off this toggle, you need to invite users manually using the Invite user option.

The invite button is the mail icon in the user detail view.

After Creating a User

  1. Picturepark sends an invitation to the email when the immediate invitation is enabled.

  2. Picturepark opens the details to assign a role. Without a role assigned, the user cannot access any content other than their own profile. 

Search and Find Users
Update and Assign User Roles

Update and Assign User Roles

The most common case is to assign a role for one user to access the content in Picturepark. 

  1. Open the User Browser.

  2. Find your user by filtering for invited.

  3. Open the Details.

  4. Assign a Role.

Find user and update role.

You can also batch assign user roles to multiple users. 

  1. Open the User Browser.

  2. Find your user by filtering for invited or searching for something. 

  3. Select the Assign roles batch operation. 

    1. You see the number of users affected in the upper text of the window. 

  4. The dialog shows the user roles in Picturepark. 

    1. You can choose whether to add (default action), remove, or overwrite (set) user roles. 

    2. Select the roles.

    3. Save.

Finding users, adding roles to all, removing roles from some.

*remove only removes the role if the role is assigned.

Update and Assign an Identity Provider

Update and Assign an Identity Provider

Users in Picturepark will have the Picturepark IDS configured as the default identity provider. You must change the Identity Provider after setting up federated authentication.  

  1. Open the User Browser.

  2. Find the user via search or filter criteria.

  3. Open the Details.

  4. Edit.

  5. Update Identity Provider.

  6. Save.

Find the user and update the identity provider.

There is currently no batch operation in the UI for updating the Identity Provider. However, you can use Postman and update via API:  

  1. Search Users: https://demo.picturepark.com/Docs/Rest/index.html#operation/User_Search

  2. Update Identity Provider for provided user IDs https://demo.picturepark.com/Docs/Rest/index.html#operation/User_UpdateIdentityProviderMany

Update Single User

Update a Single User

  1. Open Users.

  2. Open Details of one User.

  3. Update.

  4. Save.

You can only update user details for users not authenticated via a third-party identity provider, such as users in Picturepark, not users linked to the company active directory. For these users (federated users), you have to change the Identity Provider first.

No update for federated users, single update for Picturepark ad user

Update Multiple Users

Update Multiple Users

User management offers batch operations in the toolbar. When you open user management from the main menu (go to Access > Users, you can:

The numbers next to the action indicate the number of users affected by this operation; for example, assigning roles to 5 users and inviting 4 of 5 users.

This enables fast and easy user management in Picturepark, in addition to working with filters and search, for use cases such as: 

  • Select the Invited Lifecycle filter to find all invited users and re-invite them if they haven’t followed your first request already.  

  • Select a supplier A user role, which you terminated and lock all users of that role. 

  • Select all locked users of supplier B which you partnered up again and unlock them. 

  • Select all users of your default role, e.g., Reader, and assign the corresponding editor role to them. 

  • Select inactive users and reactivate them. 

Batch operations are limited to 1000 users per batch. 

Update Email and Password

Update Email and Password

Picturepark uses the Identity Server to house all user accounts. This means that your same email address can be used to connect to multiple Picturepark instances. Log in with the same email address and password, and your account will be created in the new instance. Of course, an administrator for that instance will need to review it.

 To change Email and Password

  1. Open the user profile from the main menu.

  2. Choose reset password.

    1. Change your password.

  3. Switch to Manage your account.

    1. Change your email.

Email and passwords are changed in the Picturepark IdP.

Picturepark stores all passwords encrypted using the sha256 algorithm.

Update Gravatar

Update Gravatar

To update the gravatar, open https://en.gravatar.com (if you don't already have one). This is used as the user's gravatar in Picturepark. If you do not already have an account on https://en.gravatar.com, you will need to click on sign up on the Gravatar site and either log in with Google or create a WordPress account. There is currently no other way to change the profile picture. Please do not use gravatars with transparency. These will display the default icon behind them in the current version of Picturepark.

Lock a User

Lock a User

If you lock an account, the user will receive an email notifying them. An email will also be sent if you unlock the account.

Delete a User

Delete a User

A Picturepark user can be deleted. In the Main menu, go to Access > Users. You can delete a user by selecting the user and using the Delete icon (cp_delete_icon.png ) or by right-clicking on the user and selecting Delete.

deleted user will not be notified that they have been deleted, and their identity server account will not be affected.

When a user is deleted, their user information will be shown in the User Browser until the user retention time has passed. The user is then archived and their information is no longer shown in the User Browser.
If a deleted user sent or received shares, they are no longer shown in the Recipients panel.
If the deleted user worked with content or list items, the text Former user is displayed in the Activity panels.

On deleting one or multiple users who hold ownership in Picturepark, you will be asked to select another user who will then take over ownership of their items. Deleted users who don't own anything in Picturepark are shown at the bottom of the list in the Delete Users window or deleted automatically if all the users that are being deleted have no ownership. You can also select one user as the new owner to replace all of the owners who have been deleted. Only users with more or the same number of the following user role permissions, such as the deleted user, will appear in the dropdown for selection.
Note: Deleted users will not appear in the list, however those under review or locked will:

  • manage content

  • manage shares

  • manage schemas

  • manage permission set

  • manage roles

Multiple users can be deleted in the Users menu. Select the users to delete and then select the Delete icon cp_delete_icon.png

Reactivating Users

Reactivating Users

A deleted user can be reactivated in Picturepark. In the Main Menu, go to Access > Users and select the reactivate icon. Multiple users can be reactivated at once by selecting these in the User management and hitting the reactivate icon.

Reactivation a deleted user with lifecycle “Deleted” .

A deleted user can be reactivated within 30 days (Standard can be configured per customer).

Requesting Deletion of a single Picturepark Account

Requesting Deletion of a single Picturepark Account

A user can delete themselves. If they choose to do so, they will be asked to confirm that they want to delete their account, and then they will receive an information window to let them know that their account has been deleted and they will be logged out. No emails are sent if a user deletes themselves. If they try to log in to a Picturepark with a deleted user they will receive a notification after login that their account is inactive. Note deleting their Picturepark account does not delete their identity server account. Currently, users can delete themselves regardless of whether or not they have user role permissions to manage users.

If the user requests deletion, the account will be in the authorization state. User triggered deletion, their account will be locked, and all users in the Picturepark that have a role that has the Manage Users rights of that Picturepark will receive an email that the user has requested deletion. 

After the request you can: 

  1. Delete the user's account. This will only delete the account from the Picturepark where the account deletion was requested. This does not delete the User's Identity Server account as the user may want to stay as a user in another Picturepark where this account is used.

  2. Cancel the deletion request: this will reactivate the user and send them an email saying their account has been unlocked.

Requesting Deletion of an Identity Server Account

Requesting Deletion of an Identity Server Account

A user can also request the deletion of his Identity Server account, which may have been added to multiple Pictureparks on the same platform. To do so, please contact Support.

Required User Information

Required User Information

Each Account includes a fixed set of fields to hold user information:

  • First Name *

  • Last Name *

  • Email *

  • Language *

  • Telephone

  • Company

  • Department

  • Address

  • Country

  • Alternative Address

  • City

  • Zip

Required fields are marked with an asterisk (*).

Named Accounts

Named Accounts

Picturepark accounts are named, meaning that each account should be created for and used by only one individual.

The benefits of named accounts include

  • Users can share content from their email addresses, own content, and collaborate with others.

  • Personalization features improve the user experience of named users.

  • System logs and statistics can accurately identify which user did what at what time. Picturepark can provide reporting on request. 

Please note that sharing named user accounts among different individuals might result in falsified identities, identity theft, and erroneous behaviors of Picturepark, and is excluded from all and any warranties. Sharing so-called "core users" among different individuals is also prohibited by our agreements or subject to specific requirements if an API-integration uses a named user. Please review our subscription plans and license agreements.

Licensing Considerations

Licensing Considerations

There are two user license types in Picturepark:

  • Regular User

  • Core User

Regular User licensing refers to an Account's ability to access and contribute content.
Core User licensing refers to an Account's ability to also edit content and administer the system. These terms apply only to licensing, which is not necessarily equal to Picturepark permissions.

Picturepark permits unlimited Regular User Accounts, meaning there is no license-imposed limit on the number of users or external systems that may connect at any time.

Regular User access works for users and systems that need to find, access, or contribute content, but not edit content or manage the system. You can create as many Accounts for this purpose as you need, without affecting your license cost requirements. (Note that we charge traffic from Regular User Accounts against your traffic quota.)

Users and external systems that must be able to edit content or manage the system must have Roles assigned that grant them the required permissions. Once attached to such a Role, the account uses one of the system's available Core User licenses.

An Account never uses more than one Core User license, no matter how many editor Roles it is assigned. However, if the same account connects more than one Picturepark session at a time, it consumes one Core User license for each session.

There is no Account setting that defines the account to be a Regular User or Core User. This is based solely on assigned Roles, so take care when assigning Roles that you don't inadvertently assign Core User roles to users who do not require that level of access.

Limitations

Limitations

  • A Picturepark Account is always in one of several states. The current state of an Account is shown in the Account Manager view.

  • User information is stored on secured Picturepark servers. Picturepark (the company) complies with the General Data Protection Regulation (GDPR) of the EU and other data privacy regulations but solely acts as a data processor.

  • The privacy policy and other terms defined on login, signup, and in the help menu of your Picturepark define how your personal data will be used as defined by the data controller.

  • It is not possible to change user fields or field requirements in this release of Picturepark.

  • There is no way to "reject" a user's sign-up request.

  • A user will not receive an email should their account be deleted, but if you lock them. 

  • The content and format of automated emails sent to users can be edited in templates. Be aware that you must check customized templates after each release. 

  • Automated emails come from a "no-reply" email address (Customer Settings) that Picturepark Staff can configure in the Cloud Manager.

  • There is currently no clean-up of accounts on the identity server that have been open longer than a certain period without being confirmed.

  • The following attributes exist in the search: 

    • ✔isLocked:false

    • ✔isSupportUser:false

    The following attributes do not exist in the search:

    • ❌isReadOnly:false

    • ❌isFederated:true

    • ❌isDeleted:true


JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.