Users

Invite and manage the humans who can sign in to your BEEM account.


Users are the people who sign in to the BEEM Portal. Each user has their own login credentials, their own network whitelist, and their own set of roles.

The roles you assign to a user determine which sections of the Portal they see and what actions they can take. Without the relevant role, the corresponding section is hidden from the sidebar. See the Roles reference for the full list of roles you can assign.

Users list

The Users list shows every human user on your account.

ColumnDescription
EmailThe user's login email.
First NameFirst name as entered when the user was invited.
Last NameLast name as entered when the user was invited.
Network WhitelistAllowed IP addresses or CIDR ranges. Defaults to 0.0.0.0/0.
Enabledtrue if the user can currently sign in, false if suspended.
ActionsView the user detail panel, edit the user, resend their invitation email, or delete the user.

Inviting a user

Click Create a user in the top right. Fill in the following fields and click Add:

FieldDescription
First nameThe user's first name.
Last nameThe user's last name.
Email addressThe email the invitation will be sent to. This is also the username they will sign in with.
Network whitelistIP addresses or CIDR ranges from which this user is allowed to sign in. Defaults to 0.0.0.0/0.
Assign roles to userOne or more roles that determine what the user can see and do in the Portal. See the Roles reference.

Once added, the user will receive an invitation email at the address provided and can complete their sign-up to access the Portal.

User detail

Selecting a user opens the detail panel.

FieldDescription
IDUnique user identifier.
Account IdThe account this user belongs to.
EmailLogin email.
Enabledtrue if the user can sign in.
First NameFirst name.
Last NameLast name.
Role CountHow many of the 15 available roles are currently assigned to this user.
Layer 1 Account IdThe underlying Layer 1 account identifier.
Network WhitelistAll IP addresses and CIDR ranges allowed for this user.
RolesThe full list of layer1:role:* roles assigned. Each role unlocks the matching Portal section.
📘

Restricting sign-in

For sensitive accounts, narrow each user's Network Whitelist to the IPs you expect them to sign in from (e.g. your office, VPN). Leaving the default 0.0.0.0/0 allows logins from any network.

What's next