Users and Sign-in
People work in the console; systems use API keys. This page covers the people: who has access to a tenant, with which role, and how they sign in.
Roles
Everyone with access to a tenant has one of three roles. All three can work with all of the tenant's data in the console. They differ in what they can administer under Settings:
| Can | Owner | Admin | Member |
|---|---|---|---|
| Work with articles, pricelists, prices, VAT, rounding, configuration and backups | Yes | Yes | Yes |
| Create and revoke API keys, see the plan | Yes | Yes | Yes |
| Invite users, change roles, remove users | Yes, any role | Admins and members | No |
| Make someone an owner, or change an owner | Yes | No | No |
| Choose how users sign in | Yes | No | No |
The person who requested the tenant is its first owner.
Inviting Users
- Go to Settings → Users.
- Enter the person's email address and choose member or admin.
- Choose Invite.
They get an email with a link to sign in. The list shows them as invited until they do, and then with when they last signed in. To make someone an owner, invite them first and change their role once they have signed in.
To remove a user, choose Remove on their row. They lose their access to the tenant.
How Users Sign In
An owner chooses the sign-in method under Settings → Sign-in:
- Quantaprice directory (email link), the default: users enter their email address and sign in with a link sent to it. There are no passwords.
- Your identity provider (SSO): users sign in through your organisation's Google or Microsoft Entra ID, with its own policies such as multi-factor authentication. Register Quantaprice as an application with your provider and enter its client ID. Ask support for the redirect URI to register.
Users, API keys, sign-in and plan can be administered only by someone signed in with an email link or with Google. Someone signed in through Microsoft Entra ID works with the tenant's data, but sees a notice instead of these tabs.
Moving Between Tenants
If you have access to several tenants, for example a test and a production tenant, the menu under your name in the console has Switch tenant. It lists each tenant with your role there.
Between tenants that use email-link sign-in, and the account portal, you move without signing in again. A tenant that uses your identity provider asks you to sign in through it.