Users & Security
Create vendor groups to allow third-party users controlled access to systems. This may be needed to provide support, maintenance, or any other task that requires access to the system. You can configure up to 100 vendor groups.
Add New Vendor Group
Enter a name for this vendor group.
The selected group policy defines the permissions, memberships, and other settings to all users authenticating with this vendor. These settings cannot be changed on a per-user basis. Select a policy from those available, or go to Users and Security > Group Policies to create a new one.
Group policies that grant administrative permissions are not available for vendors.
Account Expires After
Set the number of days after which the account will be deactivated.
Click to select an admin or a user from the list. The selected user can manage vendor users in this group and some self-registration settings. This user receives all configured admin notifications for this vendor group and should have a valid email address.
Any PRA user can be assigned by a PRA administrator to take over the management of that vendor group after it has been created. The PRA user does not have permission/rights to change security settings specific to the vendor–rather, the PRA user is the designated approver, receiver of notifications, and has visibility and edit privileged regarding the vendor users themselves.
Notify the PRA User When a User is Added to this Vendor Group
If this box is checked, an email is sent to the PRA admin or user in charge of the group each time a new user is added. You can require PRA approval for new members. If approval is required, a message displays next to the new member's name in the group member's list, indicating that the user Needs Approval.
Notify the PRA User When a User has Expired in this Vendor Group
If this box is checked, the admin or user in charge of the group users receives an email whenever a user has expired, as well as a link to reactivate the user, if so desired.
Require PRA User Approval to Activate Users in this Vendor Group
If this box is checked, a PRA admin or user in charge of the group must approve new members.
Require PRA User Approval to Extend or Reactivate Users in this Vendor Group
If this box is checked, a PRA admin or user in charge of the group must approve extension or reactivation of users in this vendor group.
Network Address Allow List
Enter network address prefixes, one per line, in the formats shown in the examples. Netmasks are optional, and they can be given in either dotted-decimal or integer bitmask format. Entries that omit a netmask are assumed to be single IP addresses.
Users Requiring Action
Users requiring an action from the admin or user in charge of the vendor group are listed here. Under Action Required you find the issue requiring attention. The listed issues are Disabled, Expired, Failed Login, Locked, Needs Approval, and Pending.
Click Add to add members to an existing group. You can use the search box to search for listed users under Last Authenticated As, Display Name, and Email Address. You can select which column categories with user information to display from the settings icon on the right. The options are Last Authenticated As, Display Name, Email Address, Last Authentication Date, Administrator, and Expiration Date.
Vendor Portal Settings
You can customize the vendor self-registration portal users see when they register. Changes are not applied until after the vendor group is saved.
Enable Vendor Portal
Check the box to enable the vendor portal. This feature can only be turned on after selecting a group policy under Authorization Settings.
Click to upload a logo. This can be your logo, or the vendor's logo, depending on your needs and preferences. For best results use an image that is 128x128 pixels. You can apply two accent colors and one background color:
- Accent Color 1: Controls the section header background color, border color, and dark text color.
- Accent Color 2: Controls the link color, button background color, and the language globe color.
Click Revert to Default if you do not want to keep the changes you made.
Enter the text to be displayed to users when they register in the self-registration portal.
This is the email subject that users see when they receive their confirmation email, after they have registered through the self-registration portal.
Enter the text for the confirmation email sent to users after they submit the registration form.
Vendor Portal URL
Enter the URL for the users' registration site.
Email Domain Allow List
You can restrict email addresses to the domains listed here when users register through the portal. Enter one email domain per line. Commas and spaces are prohibited. If not provided, there are no restrictions on allowed email addresses.
Enter the URL slug for your site.
When done click Preview Vendor Portal to see how the portal will look.
Add Vendor Administrator
After clicking Save on the newly created vendor group, you are notified that all vendor groups must have one user assigned as vendor administrator. You can either click Proceed to assign a vendor administrator or add the admin user later from the Vendors page.
Vendor admins cannot add other vendor admins.
When adding a vendor admin, ensure the Vendor Group Administrator box is checked.