ℹ️ Info
Part of the Getting Started guide, Before you begin.
Users are the people who sign in to revel8 to see reporting or manage the platform. They are separate from employees, who receive simulations and training. You manage users under Settings → Users (in Identity & access).
There are two ways to add users:
Add them by hand, one at a time (step 1).
Sync them from your employee data (step 4), or assign roles automatically at sign-in with single sign-on. See Single Sign-On (SSO) with SAML via Microsoft Entra ID or via Google Workspace.
1. Add a user
Open Settings → Users and click Add.
In Add user, enter the First name, Last name and Email. The email address is also the user's sign-in name.
Choose a Role (see step 2).
For a DIRECTOR, choose which groups they can see under Group access (see step 3).
Click Save.
2. Choose the right role
Role | What it is for |
CISO | Full platform administration: reporting, simulations, campaigns, settings and users. |
DIRECTOR | Oversight of part of the organization. Sees the Human Risk Monitor for their assigned groups, with no admin functions. |
EDITOR | Academy content creator. Creates and edits training modules, without access to reporting or phishing features. |
EMPLOYEE | The default. Personal space only, such as the leaderboard and Academy modules. |
What each role can open:
Platform area | CISO | DIRECTOR | EDITOR | EMPLOYEE |
Human Risk Monitor (reporting) | Yes | Assigned groups only | No | No |
Threat Composer | Yes | No | No | No |
Campaigns | Yes | No | No | No |
Settings, employees, integrations, users | Yes | No | No | No |
Academy content | Yes | No | Training modules only | No |
Personal space (leaderboard, Academy progress) | If also an employee | If also an employee | If also an employee | If also an employee |
You can only assign roles up to your own.
3. Limit what a director sees
A DIRECTOR sees only the groups you pick under Group access, and data stays anonymized unless you allow names:
Aggregated groups: the director sees only aggregated metrics for these groups.
Individual groups: the director also sees individual employees and their metrics for these groups.
To show a group with names, add it to Individual groups. To keep everything anonymized, use Aggregated groups only and leave Individual groups empty.
4. Sync users from your employee data
Sync employees brings platform users in line with your employee records, for example after roles changed in your directory.
On Settings → Users, click Sync employees.
Sync preview lists the changes:
Create: users to be invited to the platform.
Update: users whose first or last name changes.
Delete: users to be removed from the platform.
Check the counts and click Execute sync.
Under Apply changes?, confirm how many welcome emails go out and how many users lose access, then click Apply changes.
⚠️ Warning
Every new user gets a welcome email straight away, and every deleted user loses access. Check your groups and filters before you apply a sync, so you do not invite people by mistake.
What new users receive
Each new user gets a welcome email with a link to set their own password. The link works for 72 hours. After setting a password, they sign in with their email address. If your organization requires two-factor authentication, they set that up at the same first sign-in.