Partner Users
Partner Users are external user accounts that are associated with a Partner. These user accounts grant those external systems and people access to your site. Partner Users are included in the global list of users for your site, and they count as billable users.
Restrictions for Partner Users
Users can belong to only one Partner, and they receive only the folder permissions that have been granted to the Partner. Every user of a Partner has the same folder permissions.
Partner Users cannot be added to a Group, and they cannot have any sitewide administrative permissions.
Partner Users can use API keys and SSH keys to authenticate. If the Partner settings allow it, Partner Admins can generate SSH Keys for their Partner Users.
Partner Admins
Partner Admins are Partner Users who have been designated to manage accounts within their Partner. They retain the same folder access restrictions as other Partner Users.
Editing, enabling, disabling, and deleting user accounts are part of Partner Admin access, even when all Partner Admin Settings are disabled. Partner Admins can also resend welcome emails, manage their users' Additional Email Recipients, and initiate, view, or cancel pending Connected Site requests.
Because account editing includes the email address used for password recovery, appointing a Partner Admin also delegates control over where those recovery emails go. Delegated Administration explains the access and security consequences of these powers and the optional capabilities. Review it before granting Partner Admin access.
Partner Admins can change the File System Layout for any of their Partner Users. The available options are Partner Root (the default for Partner Users) and User Root, which narrows the user to a chosen subfolder of the Partner's Root Folder.
Partner Admins can view some relevant user management settings that are configured for your site, such as 2FA requirements or User Lifecycle Rules. Partner Admins cannot make any changes to your site's settings.
Partner Admins have the same folder permissions as other Partner Users for the Partner. Partner Users cannot be added to a Group or hold administrative permissions outside their Partner.
Managing Partner Users
Site Administrators can manage all Partner users across every Workspace on the site. Workspace Administrators can manage Partner users within their own Workspace.
Partner Admins can edit accounts within their own Partner. The Partner's settings control additional capabilities such as creating users, setting passwords, and managing SSH keys.
Creating Partner Users
When creating a new User, Site Administrators and Workspace Administrators can choose a Partner for the user. Existing users can be assigned to a Partner by selecting the Partner in the user's settings. When you assign a user to a Partner, you can also make that user a Partner Admin.
When creating users in bulk, the partner_id column in the Bulk Import CSV can be used to assign a Partner at import time. To make an imported Partner User into a Partner Admin, update the user's settings after importing them.
Updating Partner Users
Site Administrators can update all Partner users across the site. Workspace Administrators can update Partner users within their Workspace. Unlike Partner Admins, Site Administrators and Workspace Administrators have access to every setting for each Partner User account.
Partner Admins can change their Partner Users' email addresses, usernames, profile details, authentication methods, access expiration dates, folder layout settings, and enabled or disabled state. Direct password changes and resets of enrolled 2FA methods require Allow credential changes. Overriding the site's 2FA requirement for a user requires Allow bypassing 2FA.
Removing Partner Users
User Lifecycle Rules can automatically disable and delete Partner User accounts. Partner Users can also be deleted like any other user. If you change a user's settings to remove them from a Partner, you can then add the user to groups, assign it folder permissions, or grant administrator access.
Deleting a Partner will delete all of its associated user accounts.
Notifications for Partner Users
Partner Users can create, edit, and delete their own email notifications on any folder where they have Read permission. Users with administrator access (Site Administrators, Workspace Administrators, and Folder Admins) can manage notifications for a Partner User, regardless of the Partner User's permissions.
A Partner Channel's To Partner Folder automatically grants Partner Users Read access, so they can set up their own notification for that folder. To allow a Partner User to manage their own notifications for any other folder, assign the Read permission for the folder directly to the Partner.
Partners cannot be granted History permission, so notification management uses their Read permission instead. This lets external recipients manage their own arrival alerts without asking an administrator to maintain each subscription. It does not grant access to the History interface.
Copies of the emails sent to a Partner User go to one internal owner, not to both. A Responsible Party assigned to the user always receives them. If the user has none, they go to the Partner's Responsible Party instead, but only while Send Email Copies is enabled for the Partner.
Partner User Lifecycle
The Partner feature delegates management of external users to your trusted partners.
Site Administrators and Workspace Administrators choose whom to appoint as Partner Admins and which additional capabilities to enable. Partner Admins can maintain existing accounts with their Partner Admin access; allowing user creation and credential changes also lets them handle onboarding and password or 2FA resets within their organization.
User Lifecycle Rules can manage Partner Users by targeting specific Partners by tag. This lets you define multiple sets of rules to match your compliance requirements as needed for different classes of Partner.
When a Partner is deleted, all of its associated user accounts are automatically deleted.