User Management

Relution features an internal user management system that supports creating user accounts manually or adding them via external providers. Some key points and special considerations are explained below.

Users Overview #

• Each user is created within a single organization in Relution.
• A user cannot belong to multiple organizations simultaneously.
• Multi-tenant support is available for administrative accounts, but the user account always resides in the original tenant.
• All user accounts are stored in the database.
• Email addresses must be unique; this is checked across all organizations on the server. User names must be unique within an organization.

Adding User Accounts #

There are several ways to add user accounts:

1. Manual account creation
2. CSV file upload
3. Integration with external providers (e.g., LDAP → or Microsoft Entra ID →)

The context menu of the user list also offers Invite users (invitation by email) and Create multiple users. Both entries require the permission to create users. As of Relution 26.5.5, a wrongly entered initial password when accepting an invitation counts as a failed login attempt, see Failed Login Attempts →.

1. Manual Account Creation #

• In the Users section, clicking Add opens the input form.
• All required fields must be filled in: user name, password, given name, surname (up to 50 characters each) and email address.
• With the Disable password based authentication option, no password is set. Sign-in is then only possible via an external identity provider (e.g. OpenID Connect or SAML) or an API token. The option can only be set when the account is created and cannot be reverted afterwards.
• The Custom properties section (collapsed by default) provides 15 fields with up to 255 characters each. Fields 1–10 can be used as placeholders ${user.custom1} to ${user.custom10} in policy configurations; fields 11–15 are stored but not substituted as placeholders.
• Permissions and groups should be defined as needed.
• More information about permissions can be found in the article Permissions →.

Create multiple users creates up to 50 user accounts at once. The user name must contain the placeholder %N, which is replaced by an ascending number (default user-%N); the start value is set in the Start of %N field.

2. CSV File Upload #

The CSV import function is available for importing multiple user accounts. The complete process, including the template, preview, and optional group or permission assignment, is described in the article CSV Import →.

3. Integration with External Providers #

• When using an external provider (e.g., LDAP →, Microsoft Entra ID →), the provider is always the leading system.
• Imported content is updated automatically if it changes on the provider side.
• The fields user name, given name, surname, email address, position, phone and country are locked in the portal, as they will be overwritten during the next synchronization.
• During login, Relution always authenticates against the configured LDAP →. If the connection is unavailable, the user cannot sign in.

The configuration of the connection is explained in detail in the articles on the individual providers. For schools, the OneRoster Interface → and SchulConnex Import → connections are also available.

User Groups #

User groups are managed under Users → Groups. Groups bundle user accounts — for example, to assign permissions via group membership. Permission roles → can be assigned to individual users as well as to groups — members receive the permissions of their groups.

• Add group: A new group is created via Add in the group overview.
• Manage members: Members are added or removed via Manage members in the group details. Both user accounts and other groups can be members of a group (nested groups). For groups synchronized by a provider (e.g. from LDAP), the members are read-only.
• Delete: Groups that are no longer needed can be deleted from the group list.
• System groups: They cannot be deleted; their name and description cannot be edited, and other system groups cannot be added as members.

The group memberships of an individual user can also be managed in the user details in the Direct Memberships area under Groups & Permissions via Manage groups.