Overview of users

Avatar
Nerdio Product Support

This article contains the following sections:

Note

Note: Self-service purchased licenses cannot be managed in Nerdio Manager. See this Microsoft article for more information.

Overview

The Users page allows you to manage Entra ID users. You can add a user, assign Microsoft 365 licenses, reset passwords, assign users to groups, assign to AVD desktops, shadow user sessions, etc.

  • To view the users, at the Account level, navigate to Entra > Users.

  • The action menu allows you to perform a number of tasks. See User Management for details.

  • You can search the users based on name, username, or email.

  • Select the filter icon to create or reset the filter.

  • Select the refresh icon image632.png to refresh the list.

  • The Attributes column shows the attributes that mark a user as an Emergency Access or VIP account. Use the filter to show only the users with the Emergency Access attribute. See Attributes under User properties management.

  • Users who hold a Microsoft Entra admin role are listed only if your role includes permission to read admin users. Without permission to update or delete admin users, the controls for those users are disabled.

Add a user

Nerdio Manager allows you to add a new user.

To add a user:

  1. At the Account level, navigate to Entra > Users.

  2. Select Add User.

  3. Enter the following information:

    • Directory Source: From the drop-down list, select the directory source.

    • First Name: Type the user's first name.

    • Last Name: Type the user's last name.

    • Primary Email Address: Type the user's primary email address.

    • Mobile Number: Type the user's mobile phone number.

    • Username:

      • Make username same as primary email address: Select this option to use the primary email address as the username.

      • Username: If the username is not the primary email address, type the username.

    • Additional contact information: Optionally, select the image718.png to enter additional contact information.

  4. Once you have entered all the desired information, select Save.

Note

Guest (B2B) users can be invited and managed on this page when guest access is enabled for the account. See Manage guest user access for AVD host pools.

User properties management

Nerdio Manager allows you to manage user properties.

To manage user properties:

  1. At the Account level, navigate to Entra > Users.

  2. Locate the user you wish to work with and select Properties.

  3. On the left side, select any of the desired tabs, as detailed below, to view or change the user's properties.

  4. Once you have made all the desired changes, select Save of Save & close.

Overview

Change any of the user information as desired.

Groups

Select the group(s) the user should be a member of.

Licenses

Select the license(s) the user should be granted.

Desktops

Select the desktop host pool(s) the user should have access to.

RemoteApps

Select the RemoteApp(s) the user should have access to.

Profiles

For Intune-enabled accounts only.

Compliancy

For Intune-enabled accounts only.

Applications

For Intune-enabled accounts only.

Exchange Online

For Exchange Online-enabled accounts only. See Overview of Exchange Online Management for details.

MFA Management

Reset User Authentication methods: Delete all available strong authentication methods (MFA). This action likely requires the user to re-register their strong authentication methods, based on tenant policies.

Per-user MFA status: Configure the legacy, per-user multi-factor authentication status for the user.

Roles

Use the Roles tab to add and remove the Microsoft Entra directory roles that a user holds, in the same way as in the Microsoft Entra admin center.

  • Roles: Select one or more roles to assign to the user. Use the search box (Search by name...) to find a role, and deselect all to clear the selection. Roles are listed alphabetically, and each role's description appears as a tooltip. Roles that are assigned by the system are not listed.

  • Refresh: Reloads the roles from Microsoft Entra. If you have unsaved changes, a confirmation asks whether you want to continue, because unsaved changes are lost.

Note

The Roles field is read-only unless you have permission to update user roles. A role change goes through the approvals workflow, and a warning appears if a role update for the user is already waiting for approval.

On the Users page, select more in the Entra ID roles column of a user to open the Roles tab.

Attributes

Use the Attributes tab to mark a user as an Emergency Access account, a VIP account, or both. Select the check box for each attribute that applies, and then select Save.

  • Each check box is available only if you have the permission for that attribute. Saving also requires permission to update users.

  • The marked attributes appear in the Attributes column of the Users page, for example Emergency Access, VIP.

For more information, see Manage Emergency Access and VIP user attributes.

User management

Nerdio Manager allows you to perform various user management tasks.

To manage users:

  1. At the Account level, navigate to Entra > Users.

  2. Locate the user you wish to work with.

  3. From the action menu, select the desired action.

Desktops

Nerdio Manager allows you to assign users to AVD desktops.

  • Desktop Host Pools: From the drop-down list, select the desired desktop host pool(s) to assign to the user.

RemoteApps

Nerdio Manager allows you to assign users to RemoteApps host pools.

  • RemoteApp Host Pools: From the drop-down list, select the desired RemoteApps host pool(s) to assign to the user.

Microsoft 365

Nerdio Manager allows you to assign users to Microsoft 365 licenses.

  • Microsoft 365 Licenses: From the drop-down list, select the desired Microsoft 365 license to assign to the user.

Groups

Nerdio Manager allows you to assign users to groups.

  • Groups: From the drop-down list, select the desired group(s) to assign to the user.

Disable login

Nerdio Manager allows you to disable the user's login.

  • Remove existing AVD and Windows 365 assignments for this user account: Select this option to remove all existing AVD and Windows 365 assignments for this user account.

Archive

Instead of permanently deleting a user, you may choose to archive the user. The archive user operation can include several steps such as disabling the user login, logging off the user from host pool(s), removing host pool assignment(s), stopping session hosts, removing the user from Entra ID group(s), retaining or deleting FSLogix user profile containers, retaining Microsoft 365 licenses for a certain period or recovering the license immediately. You can select which actions are performed during the archive process.

  • Log off user: This option is available only if user has host pool assignments.

  • Remove host pool assignments: Select this option to remove user from any assigned host pools.

  • Remove user from Entra ID group(s): Select this option to remove user from any assigned Entra ID group(s).

  • Stop session host(s): Select this option to remove the user from the assigned session host(s).

  • Delete FSLogix user profile container: Select this option to delete FSLogix user profile containers, if any, for the user

  • Keep M365 license for X days : Select this option to retain the user's Microsoft 365 license for a specified number of days.

    • Select a temporary new owner of selected user's emails and OneDrive files: From the drop-down list, select the user who has access to the archived user's emails, files, and folders.

  • Remove M365 license immediately: Select this option to remove Microsoft 365 license from the user immediately.

    Note

    Note: Microsoft retains emails and files for 30 days.

Restore

Nerdio Manager allows you to restore an archived user.

  • Locate the archived user you wish to restore, and select Restore.

  • Select the desired restore options.

Reset MFA

Nerdio Manager allows you to reset MFA for a user, which typically forces a re-registration. This action delete all the strong authentication methods from the user's account.

Update Per User MFA

Nerdio Manager allows you to update the legacy, per-user MFA state for a user.

Create a Temporary Access Pass

Nerdio Manager allows you to create a Temporary Access Pass (TAP) for a cloud user, so that the user can register or recover authentication methods. The action is not available for users that exist only on-premises.

To create a Temporary Access Pass:

  1. At the Account level, navigate to Entra > Users.

  2. Locate the user, and from the user's menu select Create TAP.

  3. Confirm the prompt Create a Temporary Access Pass for user [Name]? by selecting OK.

  4. Copy the pass, and give the user the link to https://aka.ms/mysecurityinfo, where the user registers authentication methods. The dialog also shows when the pass is valid, when it was created, whether it can be used once only, and its lifetime.

    Important

    The pass can be viewed only once. If you close the dialog before you copy it, you must create a new pass.

To create a pass for a user who holds a Microsoft Entra admin role, you also need permission to update admin users. To set the policy that governs the passes, see Manage Temporary Access Passes.

Offboard

Nerdio Manager allows you to offboard a user.

In the Offboard dialog, choose when the offboarding runs:

  • Select a date and time to schedule the offboarding. A future date runs on schedule. If you choose today or a date in the past, the offboarding runs immediately.

  • Select Run instantly to start straight away. The date selector is then unavailable, and the actions that run before and during the offboarding run one after another right after you confirm. An action that is set to run after the offboarding still follows its schedule.

Offboarding starts within about a minute, and the user shows an offboarding in progress state.

Note

The Offboard and remove actions are disabled for a VIP user unless you have the permission to manage protected users. A tooltip explains that the user is protected.

Other user management functions

  • Message: Send a message to the user's desktop.

  • Shadow: If the user has an active desktop session, this allows help desk and administrators to help users remotely by viewing or taking control of the user's session.

  • Logoff: Sign off the user from the desktop.

  • Disconnect: Disconnect the user' s session.

  • Disable login: Disable the user's login.

  • Reset password: Reset the user's password.

  • Edit: Edit a user's profile.

  • Delete: The user account is permanently deleted. In addition, the user is automatically removed from groups, M365 assignment, desktops/app, etc.

Password generation

Nerdio Manager allows you to configure password generation rules that enable you to meet the password complexity you require.

To configure password generation rules:

  1. Do the following:

    Navigate to Settings > Integrations, and then navigate to the Password Generation Rules section. Select the down arrow to expand the section, and then select Edit.

  2. Enter the following information:

    • Minimum Length: Enter the minimum number of characters required for the password length.

    • Minimum Uppercase Letters: Enter the minimum number of upper case characters required.

    • Minimum Lowercase Letters: Enter the minimum number of lower case characters required.

    • Minimum Numbers: Enter the minimum number of numbers required.

    • Minimum Special Symbols: Enter the minimum number of special symbols required.

    • Allowed Special Characters: Enter the special characters that are allowed to be contained in the password.

    • Allow Repeating Characters: Select the toggle to On to allow characters to be repeated.

  3. Select OK to save any changes.

Was this article helpful?

0 out of 0 found this helpful
Have more questions? Submit a request

Related articles

Comments (0 comments)

Article is closed for comments.