Users

The account properties includes the:

• Organization ID - The name of the organization to which the user belongs. This information is for display purposes only.
• First, middle, and last name
• Default locale - The user's default locale in which to display Dayforce Identity Access Management (IAM) pages.
• User Id- The user name used to access the account, displayed as user name@organization ID. The user Id can be up to 39 alphanumeric characters.
• Email - The user's email address
• Email Communications Preference – The user's preference for which IAM emails they want to receive:
  • All Emails
  • No Emails
  • Product Emails Only
  • Compliance Emails Only
• Phone Number – The user's phone number and country code
• Send Event Update Emails – an update email is sent to the user when changes to the user's role, attributes, assigned data items, or partner products are saved.
• Enabled indicator - Indicates whether the user's account is enabled. If it isn't enabled, the user can't log in to Identity Access Management. If the user's organization is disabled, the user's account is also disabled and this indicator becomes read-only.
• Exclude from MFA through – used to exclude the user from Multifactor Authentication (MFA) through midnight of the date entered. MFA will resume on the day after the date entered.

This section contains three options that indicate what information should be sent when you add a new user account or update an existing user account.

When you add a new user account, select either:

• Send Nothing - IAM doesn't send any email notification to the new user.
• Send Welcome Email - IAM sends a Welcome email to the user with the URL to log in and the User Id. The new user clicks the URL and follows the process to log in as a first-time user. This option is selected by default.
• Default URL for WelcomeLetter - IAM includes a custom URL in the Welcome email. This defaults to the default URL selected for the organization, but you can select a different URL from the list for the user.

When you update an existing user account, select either:

• Send Nothing - IAM saves the updated information, but doesn't send a Welcome email or new 10-digit security code. The user's secret questions remain the same.
• Send Welcome Email - IAM saves the updated information and sends a Welcome email. The user must set the password and secret questions and answers. This is the same process as for the first-time user. Use this option also to enable the user's account if it was disabled.
• Default URL for WelcomeLetter - IAM includes a custom URL in the Welcome email. This defaults to the default URL selected for the organization, but you can select a different URL from the list for the user.
• Send Security Code - IAM saves the updated information and sends an email with a new 10-digit security code and login URL that the user must use to log in to IAM. The user must set the password and secret questions and answers. Use this option if the user forgot the password and either forgot or provided incorrect answers to the secret questions, or if the user account is locked.

You can add a user account to one or more roles. The roles must first be set up in Identity Access Management before you can add users to them.

All users have the IAM Customer User role by default, but you can also assign other roles to the user. You should reserve the IAM Customer Admin role only for those users who you want to be able to manage roles and users for the organization.

You can also remove users from roles as roles and responsibilities in the organization change.

Some partner applications have attributes that give access to specific functionality within the partner applications, such as Data as a Service (DaaS). The availability of specific role attributes are dependent upon the partner applications assigned to your organization by Dayforce. As the user's need to access specific functionality within these partner applications change, you can assign or remove attributes in the Roles Attributes section.

For more information about partner applications and partner attributes, see About Partner Application Roles and Partner Attributes.

Users access HPL, Powerpay, and CIBC through attributes, such as organization ID and user ID, that link the user to the application.

For HPL, when users are provisioned into Identity Access Management, the attributes that link the user to the application are assigned to the user account. Attributes that default into the user account from the organization attributes, such as organization ID can't be changed. The user ID may be overridden, which is useful to correct any user-level information that may be added incorrectly during provisioning, or to add user-level attributes if adding users manually.

For Powerpay, you must enter the Powerpay User ID for each user. The Powerpay User ID is the user's user ID in Powerpay, so by entering it in IAM, you link the user from IAM to Powerpay.

For CIBC, the CIBC user ID is generated when the CIBC user is mapped to IAM.

Warning: Do not enter the CIBC User ID. If you enter the CIBC User ID, IAM will save the information, but the mapping will fail when the user tries to log in through CIBC.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Select the user status from the list. Choose from:
   1. All User
   2. Enabled User
   3. Disabled User
3. Enter all or part of the user name in the Search field on the left side of the page.
4. Click Search. The user accounts who meet your search criteria are displayed in the User Accounts panel on the left side of the page.
5. Select the user account.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Search for and select the user account you want to edit.
3. In the User Roles section, do one of the following:
   1. To assign a new role, click Assign/Unassign.
      1. Select the check box for the roles you want to assign to the user account.
      2. Click Assign.
   2. To remove a role assignment from the user account, select the role from the list of assigned roles and click Assign.
4. Click Save.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Search for and select the user account you want to edit.
3. In the Role Attributes section, do one of the following:
   • To assign a new data profile, click Assign/Unassign.
     • Select the check box for the role attribute you want to assign to the user account. Alternatively, you can clear a check mark to remove a role assignment.
     • Click Assign.
4. Click Save.

Note: Refer to the User PSID Assignment page to assign PSIDs to a user account.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Search for and select the user account you want to work with.
3. In the User Attributes section, find the name of the user attribute you want to add or change. If the Value text box is editable, you can add or change the user attribute.
4. Enter the new attribute value.
5. Click Save.

Tip: If you add the user's role and attributes at the same time, you must save the role assignment before assigning role attributes. The attributes for the role don't appear in the list to be assigned until after you save the role assignment.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Search for and select the user account for which you want to manage attributes.
3. In the Role Attributes section, do the following.
• To assign new users, click Assign/Unassign.
  • Select the check box for the users you want to assign to the role.
  • Click Assign.
• To remove an attribute from the role, select the attribute in the list of assigned attributes and click Assign.
4. Click Save.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Search for and select the user account you want to edit.
3. In the Properties section, click Enabled.
4. In the User Account Reset options, click Send Welcome Email. IAM sends the user a Welcome email with a URL used to start the process of setting up a password, secret questions and answer. This is the same process as for a first-time user.
5. Click Save. The user will need to create a new password and set up secret questions and answers the next time the user logs in.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Search for and select the user account you want to edit.
3. In the User Account Reset section, click either:
   • Send Welcome Email - IAM sends the user a Welcome email with a URL used to start the process of setting up a password and secret questions and answers. This is the same process as for a first-time user.
   • Send Security Code - IAM sends the user an email with a URL and security code. The user clicks the URL, enters the security code, and starts the process of setting up a password and secret questions and answers.
4. Enter a new password for the user, and then enter it again to confirm it.
5. Click Save.

1. Open the Users page.

   How?

   1. In the navigation panel, click your organization name. If you have access to multiple organizations, you can click Search to find your organization.
   2. With your organization selected, click the navigation panel, and then click Users.

   3. Select the user status from the list. Choose from:

      1. All User

      2. Enabled User

      3. Disabled User

   4. Type all or part of the user's name or User Id in the Search box.
2. Enter all or part of the user account name.
3. Click Search. The user accounts who meet your search criteria are displayed in the User Accounts panel on the left side of the page.
4. Select the user account for the user fro whom you want to remove access.
5. Clear the Enabled check box.
6. Click Save.

Note: If you need to enable the user account again later, you will need to ensure that the appropriate partner applications, roles, attributes, and PSID/FEINs are assigned to the user’s account. There is no way to “reinstate” the user account with the same information as when it was disabled. For more information about these activities, follow the procedures you used to add the user account initially.