# Users
As an app administrator either at both the **app store** and **application** level, learn how to add and modify user.
### Overview
On this page, you have the users in rows and the apps of your instance as columns.
At the intersection, a pictogram indicates what types of access has been granted.
More than giving you an overview of your users’ access, from this interface you can also:
* Search the users: just start typing the user’s email
* See the number of users
* Download the users list (csv format)
* Sort your users
* Hover on the user name to get its creation date
* Get a reminder of what the pictograms mean
### Create users
You can create users from the **Add user** button at the top right side of your screen.
#### Create/edit a single user
**Options**
* **Username** : the username can be either an email address or text (such as an ID, for example)
* **Password** :
* **Password generation by email** : The user will receive an email to generate its password
* **Single Sign-On** : Thanks to the OAuth provider setup in the `instance_settings.cson`, the user will be able to reuse existing SSO credentials to login to Toucan.
* **Manually set password** : Choose a temporary password, as soon as you choose to send a password generation email to your user, you won’t be able to modify it.
* **User-group(s)** : *(Optional)* assign one or multiple groups to your user.
* **Set an expiration date for this account** : *(Optional)* allows you to create a user for a limited period of time. Great for demos or prospect materials.
**Assign privileges**
Once you have created your user, click on **continue** to assign rights to one or multiple apps:
Here are the privileges explanation (in increasing order of rights perimeter):
* **No access**: the user cannot access the app
* **Viewer**: the user can access the app and user collaborative features in production only but cannot access the studio
* **Validator**: the user can access the studio to validate the app before any release to production. The user cannot create or update the app by himself
* **Contributor**: the user can access the studio to edit the app.
If your user is added to a group using group privileges, this step will be skipped. User will inherit privileges setup at the group level.
{% embed url="" %}
**Notifications settings**
Choose how you want to notify your new user of its access :
* **No email** : the user won’t receive any welcome email to the platform. The user will only receive its password generation email if specified at creation
* **Platform email** : the user will receive one global email listing all the app access granted
* **Applications emails** : the user will receive an email for each application access has been granted to
**Edit users**
You can edit a user’s privileges directly from the interface by clicking on the user privilege icon in a given app column.
If your user belongs to a group with privileges, you won’t be able to edit the user access. You’ll have to remove the user from the group to do so.
{% embed url="" %}
You can edit a user’s information by selecting a user from the list to activate the edition menu at the bottom right of your screen.
#### Create/edit multiple users
{% hint style="info" %}
**Hint**
This is what we call bulk creation 👥
{% endhint %}
**Bulk creation/edition template**
To create multiple users, you need to drop a csv file that contains specific information.
A template file is available for download. This file contains all the required columns you need to fill:
* **username** : the username can be either an email address or text (such as an ID, for example)
* **admin** : type in `true` to give admin access to a specific user
* **provider** : *(Optional)* the name of the sso provider (leave empty if the user logs in via username/password)
* **user-group** : *(Optional)* type in the name of the group, leave it empty if you don’t want to assign any group to your user(s). There are by default 3 user-group column, but you can add more just make sure to update the number after `user-group`
* All existing app on your store will have a dedicated column (`small-app lovely-name`), you just need to fill what type of privilege each user will have for each app:
* `view` for a Viewer
* `validate` for a Validator
* `contribute` for a Contributor
{% hint style="info" %}
**Hint**
If you want to delete some users with a bulk upload, then add a `delete` columns and fill it with `true` or `false`
{% endhint %}
Once you’re done filling-up the template, you just have to drop it in the tile 🎉
**Send email invitation to new users** : with this option activated, users will receive an email to inform him/her of his/her access to the Toucan application and will be invited to create his/her own password.
File example (bulk creation):
| username | admin | user-group 0 | user-group 1 | small-app finance | small-app marketing |
| ---------------------- | ----- | ------------ | ------------ | ----------------- | ------------------- |
| test\@toucantoco. com | true | | | | |
| test2\@toucantoco .com | | Manager | | view | |
| test3\@toucantoco .com | | | | view | contribute |
* `test@toucantoco.com` will be admin
* `test2@toucantoco.com` will be assigned to the Manager group and have a view access to the Finance app
* `test3@toucantoco.com` will have a view access to the Finance app and contributor access to the Marketing app
**Edit multiple users**
You can edit multiple user’s privileges by selecting the users from the list to activate the edition menu at the bottom right of your screen.
