How to Create and Configure User Accounts

Overview

Every person who accesses Mango by Radix IoT needs a user account. This guide covers creating accounts, assigning roles, configuring user-specific settings, and managing the full account lifecycle from creation to deactivation.

Creating a New User Account

Navigate to Access management → Users
Select a role in the Roles pane on the left. The card on the right is headed Users for role and lists only the users who hold that role — select user to see every account
Click the Add user icon in that card's toolbar. The user editor opens in a dialog

Fill in the required fields:

Field	Description	Tips
Username	Login name (must be unique)	Use a consistent convention: first.last, email, or employee ID. Usernames are matched case-insensitively, so `bob` and `Bob` are the same account
Password	Initial password	Fill Confirm password as well — both are required on a new account. See the tip below for making the user set their own
Email address	Used for notifications	Required if user will receive event handler emails
Name	Display name	Full name for identification in logs and audit trails

Click Save

Assigning Roles

Roles live on the user editor itself, so you can assign them while creating the account — there is no save-and-reopen step.

Open the Roles drop-down on the user editor
Select one or more roles from the list
Click Save

Do not reach for Add role in the Roles pane: that creates a new role rather than assigning an existing one.

A user's effective permissions are the union of every role they hold: the roles you assign, any roles those roles inherit, and user, which every authenticated account is a member of. If a user has both site-a-operator and site-b-viewer, they can operate Site A equipment and view Site B dashboards.

User Settings

Each user account has configurable preferences:

Setting	Purpose	Default
Home URL	Page shown after login. Must be an absolute path, starting with a single slash	Empty — login goes to the start page the UI module is configured with
Time zone	Time display throughout the UI	Use server time zone
Locale	Date and number formatting	Use server locale
Send alarm emails	Not a checkbox — an alarm level. The user is emailed when an event is raised at or above this level. No escalation or return-to-normal emails	Ignore — no emails
Receive own audit events	Emails the user about their own configuration changes, and only at or above their Send alarm emails level	Cleared
Muted	Silences the audible alarm sound for this user	Muted
Disabled	The account cannot log in. This is separate from Password locked, which blocks only the current password	Not disabled
Override session expiration	Gives this one account its own Session expiration instead of the system default	Cleared

Setting the Home Page

Set each user's home page to the dashboard or page most relevant to their role:

Operators: Set to their primary monitoring dashboard
Engineers: Set to the data source list or configuration page
Executives: Set to a KPI summary dashboard
Admins: leave it empty — login then goes to the UI module's configured start page

Account Lifecycle Management

Onboarding

Create the account with a temporary password and assign its roles
Set the home URL and time zone
Open the saved user's More options menu and choose Reset password
Tick Send password reset instructions to user's email address and Lock current password, choose an expiry, then click Create password reset token
Locking the current password means the temporary one no longer works, so the user must set their own through the link

Role Changes

When a user changes responsibilities (e.g., moves from Site A to Site B):

Remove the old role(s)
Add the new role(s)
Update the home page if needed
No need to change permissions on individual objects — the role update handles everything

Deactivation

When a user leaves the organization:

Open the user's edit page
Tick the Disabled checkbox
Click Save

Disabling (rather than deleting) preserves the user's audit trail. Their name still appears in historical event acknowledgments and logs. Delete only if required by data retention policies.

Tip

After creating or modifying a user account, open its More options menu and choose Switch to user — a superadmin-only action — to see Mango exactly as that account does. This catches permission gaps before the user reports them. If one account needs a different timeout from everyone else, tick Override session expiration and set Session expiration: 30–60 minutes is typical for operators, and kiosk dashboards may need longer.

Bulk User Management

For deployments with many users:

Use JSON import/export to create users in batch from a prepared JSON file
Use the REST API to script user creation and role assignment
Use roles consistently — adding 50 users to the same role is faster than configuring 50 individual permission sets

Security Best Practices

Unique accounts per person — never share accounts. Shared accounts make audit trails useless
Strong passwords — require minimum length and complexity where possible
Principle of least privilege — assign the minimum roles needed for the user's job
Regular reviews — quarterly, review user list and disable accounts that are no longer needed
Limit superadmin — only one or two accounts should have the superadmin role

Troubleshooting

Issue	Cause	Fix
User can't log in	Wrong password, account disabled, or the password is locked. Mango has no failed-login lockout, so repeated attempts are not the cause	Reset the password; check the Disabled and Password locked columns
User sees empty dashboards	Role not assigned to dashboard or data points	Check the four-link permission chain: View menu item on the menu entry, View page on the page, View watch list if the page uses one, and View point & value on the points
User can access too much	Role has broader permissions than intended	Review role assignments and object permissions
Can't find user in list	The list shows only the users who hold the role selected in the Roles pane	Select the `user` role, which every account holds, then use Show filters to search by username

Summary

Creating user accounts is straightforward: fill in details, assign roles, set the home page. The key to scalable user management is relying on roles rather than per-user permissions. Disable accounts instead of deleting them to preserve audit history, and review accounts regularly to maintain security.