User management UI and common tasks

New user model

This doc is about managing users who are on our New Relic One user model.

This doc explains how to find and use the user management UI and how to do some common user management tasks.

User management UI

For users on the New Relic One user model, to find your user management options: From the account dropdown, select Administration. There are two user management UI pages there:

User management: Use this to add users, update user type, manage what groups a user is assigned, and approve user upgrade requests.
Organization and access: Use this UI to create and manage groups, roles, and access grants. Use the authentication domain UI to set up SAML SSO and SCIM provisioning.

Want to see videos of the user management UI in action? See our user management videos.

Important

If you can't see these UI pages, it may be because you're on our original user model or because you don't have a required role.

Requirements

The easiest way to see what your user management permissions are is to go to the user management UI and see what you have access to.

Some user management requirements and restrictions:

This doc is about managing users on the New Relic One user model.
To manage groups, roles, and access grants, your organization must be Pro or Enterprise edition.
Permissions-related requirements:
- Requires a user type of core user or full platform user.
- Most user management capabilities require the Authentication domain manager role and some require the Organization manager role. For details, see Roles.
To avoid configuration conflicts, try to ensure that only one person in your organization is managing users at a time.
A New Relic user is prohibited from sharing their login with other people. A New Relic user can have a maximum of either three concurrent active sessions, or three unique IP addresses in use at any given time.

Common user management tasks

New Relic One organization and access UI

In the Organization and access UI, you can create access grants, custom groups, custom roles, and configure an authentication domain.

Here are some example user management procedures:

Before changing your users’ user type, we recommend you understand:

How to decide a user's user type
How billable users are calculated
User downgrade rules
If you're using automated user management, you have other options for managing user type.
To change the user type of one or more users:

From the User management UI, click the checkboxes for the users whose user type you want to edit.
Once you start selecting users, an option will appear for Edit type.
You can also edit the user type and group of a specific user by clicking on that user.
To manage how users upgrade their user type, see the authentication domain settings.

To grant your users the ability to manage other users, you'll need to add users to a group that has the Authentication domain manager role.

You have two options:

From the User management UI, you can add a user to the default Admin group, which includes that role.
OR
You can create a custom group and assign it that role. For a tutorial on creating new access grants, groups, and roles, see the user management tutorial.

Track changes

To see an audit log of changes to your account, including user management actions, you can query the NrAuditEvent.

New user model