In the Users workspace of the Administration area, you can create, manage, and delete users for the Lucanet CFO Solution Platform.

In this workspace, you can configure the following settings:

  • Which users can access the different solutions and/or act as an administrator in the Lucanet CFO Solution Platform
  • User roles for each of the different solutions
  • User access to individual AI agents
  • Presets such as the display language and formatting displayed for the users

As a user with access to the Administration area, you can create new users for the Lucanet CFO Solution Platform. To do this, go to Administration | User management | Users and click Create User. The options for Creating users are displayed in the panel on the right side of the window, as follows, for example:

Displays the ‘Create User’ side panel with the ‘General’ tab open. The ‘Language and formatting’ tab is grayed out.
'Create User' side panel

You can use the General tab to configure the following options for all users of the CFO Solution Platform:

OptionDescription
First nameThe user's first name
Last nameThe user's last name
User nameThe user's login name

Note: Usernames cannot contain spaces.
E-mail addressThe user's e-mail address
Enable authenticationDefines how the user authenticates.

For more information on the available authentication methods, see Authentication Methods.
Lucanet.Certified ProfessionalCreates a Lucanet.Certified Professional user account. In the user overview, Lucanet.Certified Professional users are indicated by the Lucanet.Certified Professional icon icon.

You can find more information on Lucanet.Certified Professional user accounts in the online help tool for Lucanet.Financial Client, under Complete description | Administration | Administration at database level | User management | Lucanet.Certified Professional.

Note: No licenses are required for Lucanet.Certified Professional users. This means that Lucanet.Certified Professional users can be assigned roles in a solution for which there are no more license slots available.
Select user accessDefines which solutions you want the user to be able to access, and whether you want to grant the user access to the Administration section of the Lucanet CFO Solution Platform.

The following solutions are currently available on the CFO Solution Platform:
• Consolidation & Financial Planning
• Lease Accounting
• xP&A (Extended Planning & Analysis)
• ESG Reporting
• Disclosure Management
• XBRL Tagger
• Tax Compliance & Reporting
• Banking & Cash Management
• Data Collection

Which solutions are available to choose from depends on your license scope.

Note: If you use Lucanet.Financial Client, users created in the Lucanet CFO Solution Platform are automatically synchronized with Lucanet.Financial Client.
Select user rolesDefines a user role for each selected solution and, where applicable, user roles for the Administration area.

For more information on the available user roles, see User Roles in the Lucanet CFO Solution Platform.

For the following solutions, you can define further settings in addition to the user role:
• Consolidation & Financial Planning: Detailed permissions for accessing the data model (see Defining Permissions for CFP Data Model Roles)
• Lease Accounting: The reporting entities that the user can access (see Assigning Reporting Entities to Lease Accounting Users)

Note: User roles for whom the last license slot is available are indicated with the Warning icon icon. If there are no license slots left for a user role, it will be grayed out.
AI AgentsDefines which AI agents the user can use. Which agents can be selected depends on the solutions the user has access to. For more information, see Assigning AI Agents to a User.
Lock the user permanentlyLocks users from accessing the Lucanet CFO Solution Platform. Locked users are indicated by the Locked icon icon in the user overview. By deactivating this check box, you will be able to unlock locked users.

Note: This option is only visible when editing a created user.

If the Enable authentication check box is activated, you must select one of two authentication methods. The methods are displayed as follows, for example:

Activated 'Enable authentication' check box with the 'External authentication' and 'TOTP MFA (authenticator app code)' methods below it.
Authentication methods in the 'General' tab

External authentication: The user logs in through the configured identity provider. This method requires an authentication protocol to be configured in the External authentication workspace. In the list of users, these users are indicated by the External authentication icon icon. If external authentication is set as the default for new users, this method is preselected and can be deactivated. For more information, see Configuring External Authentication | Global Authentication Settings in the CFO Solution Platform.

TOTP MFA (authenticator app code): The user logs in with user name and password and must enter a six-digit code from an authenticator app at every login. The user receives an e-mail and sets up an authenticator app the next time they log in. In the list of users, these users are indicated by the TOTP MFA icon icon. For more information, see Opening the Lucanet CFO Solution Platform | Multi-Factor Authentication with an Authenticator App.

If external authentication is enforced, External authentication is preselected for every new user and cannot be changed, and the TOTP MFA (authenticator app code) authentication method cannot be activated or deactivated. For more information, see Configuring External Authentication | Enforced External Authentication.

If you deactivate the Enable authentication check box when editing a user with TOTP MFA, the user logs in with user name and password only and is no longer asked for a code.

If you activate the multi-factor authentication for this user again later, the user must set up an authenticator app again. The previous entry in the authenticator app no longer works.

To give a user access to AI agents in the Lucanet CFO Solution Platform, activate the AI Agents check box on the General tab when you create or edit the user, and select at least one agent. AI agents can only be assigned if the AI features are activated (see Managing Lucanet Licenses | Activating and Deactivating the AI Features).

To use an AI agent, a user needs access to the corresponding solution. The following table shows which solution is required for each AI agent in the Lucanet CFO Solution Platform:

AI agentRequired solution
Analyst AgentConsolidation & Financial Planning or xP&A
Close AgentConsolidation & Financial Planning
Modeler AgentxP&A
ESG Emission AgentESG Reporting
Tagger AgentXBRL Tagger

Agents that require a solution that the user has no access to are grayed out. If the AI Agents check box itself is grayed out, hover over it to display the reason. The AI Agents check box is displayed as follows, for example:

Shows the 'XBRL Tagger' solution with the 'Administrator' user role selected and the activated 'AI Agents' check box on the 'General' tab in the Lucanet CFO Solution Platform. Below 'AI Agents', 'Tagger Agent' can be selected, while 'Analyst Agent', 'Close Agent', 'Modeler Agent', and 'ESG Emission Agent' are grayed out. Highlighted in red are 'XBRL Tagger' and 'Tagger Agent'.
'AI Agents' check box

The following rules apply to a user's access to AI agents in the Lucanet CFO Solution Platform:

  • If you remove the user's access to a solution, the user loses access to the AI agents of that solution when you save. Access to the Analyst Agent remains as long as the user still has access to Consolidation & Financial Planning or xP&A.
  • If you give the user access to the solution again later, you also have to select the AI agents again.
  • To remove the user's access to all AI agents, deactivate the AI Agents check box.
  • All changes to a user's access to AI agents are recorded in the change log.

Use the Language and formatting tab to configure the language and formatting used to display the software to the user. The tab is displayed as follows:

Displays the ‘Language and formatting’ tab in the ‘Create User’ dialog.
‘Language and formatting’ Tab

Users can change their display language and formatting at any time using the options in the top bar (see Basic Configuration for the Lucanet CFO Solution Platform). If a user has changed these settings in their User Account, you can no longer change them as an administrator.

Once a user has been successfully created, they will automatically receive an invitation e-mail with the following information:

  • A link to the Lucanet CFO Solution Platform
  • A temporary password with which the user should log in for the first time if no external authentication is activated for them.
  • Links to access Lucanet.Financial Client if the customer is licensed for Lucanet Consolidation & Financial Planning and the user has access to Lucanet Consolidation & Financial Planning or Administration.

Note: New users must change their temporary password upon first login. For complete information on password requirements and lifecycle policies, see Opening the Lucanet CFO Solution Platform | Password Policy.

By default, the most recently updated users appear at the top of the list of users in the CFO Solution Platform. You can use the menu of the Three-dot icon icon to perform the following actions:

  • Edit user
  • Resend an invitation e-mail to the user. This option is available when the user has not yet logged into the Lucanet CFO Solution Platform, or when external authentication (SSO) is activated for the user, in which case it remains available even after the user's first login.
  • View a user's change log to obtain detailed information about the changes made (for more information on the change log in user administration, see Change Log)
  • Reset the TOTP MFA of a user (for more information, see Resetting TOTP MFA)
  • Delete user.
Shows the list of users in the CFO Solution Platform with the open menu of the three-dot icon for a user. Highlighted in red are the menu options 'Edit user', 'Resend invitation e-mail', 'Change log', 'Reset TOTP MFA', and 'Delete user'.
More user management options
  • The option for activating Lucanet.Certified Professional is only available when creating a user. It is not possible to change this option when editing a user at a later date.
  • Administrators can delete their administrator permissions when editing their own accounts. However, there must still be at least one user in the system who has access to the Administration functions.
  • It is possible for multiple users with Administration permissions to edit the same user account simultaneously. Whoever changes are saved first will be applied.

You can reset the multi-factor authentication for a user, for example if the user no longer has access to their authenticator app or wants to use a different device. The authenticator app is then unlinked, and the user sets up a new authenticator app the next time they log in. The user receives an e-mail with instructions.

To reset the multi-factor authentication for a single user, click Reset TOTP MFA in the menu of the Three-dot icon icon. The dialog is displayed as follows, for example:

Dialog 'Reset TOTP MFA' with the user name and the e-mail address of the affected user and with the 'Reset MFA' button.
Dialog for resetting TOTP MFA

To reset the multi-factor authentication for several users at the same time, activate the check boxes in front of the users and click Reset TOTP MFA (for more information, see Managing Multiple Users at Once). The dialog then displays the number of selected users instead of their names, as follows, for example:

Dialog 'Reset TOTP MFA' for two users with the 'Reset MFA' button.
Dialog for resetting TOTP MFA for several users

Click Reset MFA to confirm.

The Reset TOTP MFA option is only available for users for whom multi-factor authentication is activated. Resetting the multi-factor authentication does not change the user's password.

You can use the Filter icon icon in the column heading in the user overview of the CFO Solution Platform to filter the users that have been created so far by user name, e-mail address or user role. This is useful if you only want to view users with a specific role, for example. The filtered column is indicated by the Filter icon icon.

Shows the user table in the CFO Solution Platform with the 'User name', 'E-mail address', and 'User role' columns. The filter window of the 'User role' column is open with a search field, the '(Select all)' check box, and check boxes for the user roles.
Filtering users

Additionally, it is possible to filter and display the following user attributes using the filter above the list of users in the CFO Solution Platform:

LabelUsers
TOTP MFA iconUsers for whom TOTP MFA is activated
External authentication iconUsers for whom external authentication is activated
Lucanet.Certified Professional iconLucanet.Certified Professional users
Locked iconPermanently locked users
License Manager iconUsers with the License Manager role

The user labels are displayed as follows, for example:

Shows the list of users in the CFO Solution Platform with the open 'Filter by user labels' drop-down list above the list. Highlighted in red are the check boxes for the user labels 'TOTP MFA', 'External authentication', 'Lucanet.Certified Professional', 'User locked', and 'License Manager'.
User labels in the 'Filter by user labels' drop-down list

To make user management more efficient, you can select multiple users in the list of users and perform various actions simultaneously. To manage multiple users at once in the CFO Solution Platform:

1

Navigate to the workspace Administration | User management | Users.

2

In the list of users, activate the check boxes in front of the users you want to manage. If you want to activate multiple check boxes at the same time, you have the following options:

  • Activate the check box in the first row to activate all check boxes at the same time.
  • Activate the first check box, press the Shift key, and then activate the last checkbox.

The number of selected users and the action buttons are then displayed as follows, for example:

Shows the list of users in the CFO Solution Platform with two users selected. Highlighted in red are the number of selected users, '2 users selected', and the buttons 'Edit users', 'Resend invitation e-mail', 'Reset TOTP MFA', and 'Delete users' above the list.
Manage multiple users simultaneously
3

Click the appropriate button to perform the following actions:

  • Edit users (for more information, see Bulk Edit Options)
  • Resend an invitation e-mail to the users. This option is available when the users have not yet logged into the Lucanet CFO Solution Platform, or when external authentication (SSO) is activated for the users, in which case it remains available even after their first login.
  • Reset the TOTP MFA of the users (for more information, see Resetting TOTP MFA)
  • Delete users

The following options are available for simultaneous editing of multiple users in the CFO Solution Platform:

In the Access and roles area, you can grant or revoke access to a solution or to Administration for all selected users. When you grant access, you also have to select a user role for the solution or for Administration. The Access and roles area is displayed as follows, for example:

Shows the 'Access and roles' area on the 'General' tab of 'Edit Users' in the Lucanet CFO Solution Platform. 'ESG Reporting', 'Disclosure Management', and 'Data Collection' are set to 'No changes', and 'Administration' is set to 'Grant access'. Highlighted in red are the 'User roles' for Administration with the options 'Administrator' and 'License Manager'.
Edit user access and user roles for multiple users

In the AI Agents area, you can grant or revoke access to AI agents for all selected users at once. The area is only available if the AI features are activated in the Lucanet CFO Solution Platform. The following options are available in the AI Agents area:

OptionDescription
No changesKeeps the current access to AI agents for the selected users and is preselected.
Grant accessGives the selected users access to the agents that you select.
Revoke accessRemoves the selected users' access to all AI agents without changing their solution access or user roles.

To make an agent selectable under Grant access, also set its solution to Grant access with a user role, even if the selected users already have access to the solution and a user role. At least one agent must be selected. If you select Grant access, the agents are displayed as follows, for example:

Shows the 'AI Agents' area in 'Edit Users' in the Lucanet CFO Solution Platform with 'Grant access' selected. 'Analyst Agent' and 'Modeler Agent' can be selected, while 'Close Agent', 'ESG Emission Agent', and 'Tagger Agent' are grayed out. Above it, the 'Administration' area is set to 'No changes'.
'AI Agents' area with 'Grant access' selected

Grant access replaces the current access to AI agents for every selected user. For example, if a user has access to the Modeler Agent and you select only the Tagger Agent, the user only has access to the Tagger Agent after you save.

If you revoke access to a solution at the same time, the selected users also lose access to the AI agents of that solution, even if AI Agents is set to No changes.

In the Other settings area, the following options are available for all selected users:

  • Enables or disables external authentication for the selected users if an authentication method is configured in the External Authentication workspace
  • Enables or disables the Require MFA (authenticator app code) setting for the selected users. Regardless of the current setting of the selected users, No changes is preselected.
  • Locks or unlocks all selected users

The Other settings area is displayed as follows, for example:

Shows the 'Other settings' area on the 'General' tab of 'Edit Users' in the Lucanet CFO Solution Platform with the settings 'Require MFA (authenticator app code)' and 'Users' state', both set to 'No changes'.
Edit other settings for multiple users

On the Language and formatting tab, you can define the default settings for language and formatting for all selected users. The default settings only apply to users who have not changed their language and formatting settings themselves. The Language and formatting tab is displayed as follows, for example:

Shows the 'Language and formatting' tab of 'Edit Users' in the Lucanet CFO Solution Platform with 'Activate configuration' switched on and a note that the changes only apply to users who have not changed their formatting preferences. Below are the fields 'User interface language' set to 'English', 'Date format' set to 'DD.MM.YYYY', 'Number format' set to '10,000.00', and 'Display of negative numbers' set to '-10,000.00'.
Change language and formatting settings for multiple users

This content was generated using AI and reviewed by Lucanet subject matter experts before publication.