{"id":21987,"date":"2026-07-24T10:07:34","date_gmt":"2026-07-24T10:07:34","guid":{"rendered":"https:\/\/tenthplanet.in\/idempiere\/?p=21987"},"modified":"2026-07-24T10:07:36","modified_gmt":"2026-07-24T10:07:36","slug":"how-to-view-all-users-in-idempiere","status":"publish","type":"post","link":"https:\/\/tenthplanet.in\/idempiere\/how-to-view-all-users-in-idempiere\/","title":{"rendered":"How to View All Users in iDempiere"},"content":{"rendered":"\n

Introduction<\/strong><\/h2>\n\n\n\n

The All Users window in iDempiere shows every user account created across all tenants in a single list, along with the roles assigned to each account.<\/p>\n\n\n\n

It is used by the System Administrator role, separate from the tenant-level User window that is used to create and update accounts.<\/p>\n\n\n\n

It gives administrators one place to check account status, login activity, and role assignments, supporting security review and access oversight across the installation.<\/p>\n\n\n\n

Process Flow<\/strong><\/h2>\n\n\n\n
\"TenthPlanet-iDempiere-SystemAdmin-AllUsers-ProcessFlow\"<\/figure>\n\n\n\n

Business Rules<\/strong><\/h2>\n\n\n\n
    \n
  • All Users is a read-only window; accounts cannot be created, edited, or deleted from this screen.<\/li>\n\n\n\n
  • Only the System Administrator role can open this window, since it lists users across every tenant.<\/li>\n\n\n\n
  • Each record shows the tenant the account belongs to, helping identify cross-tenant accounts.<\/li>\n\n\n\n
  • The User Roles tab lists every role assigned to the selected user, including system-level roles.<\/li>\n\n\n\n
  • The Active field shows whether an account can currently log in; inactive accounts stay visible.<\/li>\n\n\n\n
  • Locked status and Failed Login Count are shown to support account security review.<\/li>\n\n\n\n
  • Any change to a user account must be made in the tenant-level User window, not here.<\/li>\n<\/ul>\n\n\n\n

    Prerequisites<\/strong><\/h2>\n\n\n\n
      \n
    • System Administrator login credentials.<\/li>\n\n\n\n
    • User accounts already created for one or more tenants through the User window.<\/li>\n\n\n\n
    • Roles already assigned to users through the User Roles tab of the User window.<\/li>\n<\/ul>\n\n\n\n

      Navigation<\/strong><\/h2>\n\n\n\n
      Menu \u2192 System Admin \u2192 General Rules \u2192 Security \u2192 All Users<\/strong><\/code><\/pre>\n\n\n\n
      \"TenthPlanet-iDempiere-SystemAdmin-AllUsers-1\"<\/figure>\n\n\n\n
      The exact menu grouping can vary slightly by version, but the window is always opened using the System Administrator role.<\/p>\n\n\n\n
      After opening, the User tab lists every account across all tenants. Selecting an account and opening the User Roles tab shows the roles assigned to that account.<\/p>\n\n\n\n
      \"TenthPlanet-iDempiere-SystemAdmin-AllUsers-2\"<\/figure>\n\n\n\n
      Steps to Review User Information<\/strong><\/h2>\n\n\n\n
      Step 1: Open the All Users Window<\/strong><\/h3>\n\n\n\n
      This step is required to see user accounts from every tenant in one place, instead of checking each tenant separately.<\/p>\n\n\n\n
      Instructions<\/strong><\/h3>\n\n\n\n
      Log in with the System Administrator role and open All Users from the menu. The window opens on the User tab, listing every account across all tenants.<\/p>\n\n\n\n
      Field Reference Table<\/strong><\/h3>\n\n\n\n
      Field<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>
      Tenant<\/td>System<\/td>Shows which tenant the account belongs to<\/td><\/tr>
      Name<\/td>SuperUser<\/td>Display name of the account<\/td><\/tr>
      EMail Address<\/td>superuser@idempiere.com<\/td>Login email address for the account<\/td><\/tr>
      Search Key<\/td>superusr<\/td>Short code used to identify the account<\/td><\/tr>
      Active<\/td>Checked<\/td>Shows whether the account can currently log in<\/td><\/tr>
      Locked<\/td>Unchecked<\/td>Shows whether the account is locked after failed logins<\/td><\/tr>
      Date Last Login<\/td>07\/24\/2026 9:27:47 AM<\/td>Last recorded login date and time<\/td><\/tr>
      Failed Login Count<\/td>0<\/td>Number of consecutive unsuccessful login attempts<\/td><\/tr>
      Support User<\/td>Checked<\/td>Marks the account as a support-level user<\/td><\/tr>
      Expired \/ No Expire<\/td>Unchecked<\/td>Shows the password expiry status of the account<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      Step 2: Review Role Assignments<\/strong><\/h3>\n\n\n\n
      This step is required to see what access a user has been given, since access is controlled through roles, not the account record itself.<\/p>\n\n\n\n
      Instructions<\/strong><\/h3>\n\n\n\n
      Select a user row in the User tab, then open the User Roles tab. Every role assigned to that account, across tenants, is listed with its access settings.<\/p>\n\n\n\n
      Field Reference Table<\/strong><\/h3>\n\n\n\n
      Field<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>
      Tenant (All)<\/td>System<\/td>Tenant to which the role assignment belongs<\/td><\/tr>
      Role (All)<\/td>System Administrator<\/td>Role assigned to the selected user<\/td><\/tr>
      User Level<\/td>System<\/td>Level at which the role operates: System, Client, or Client+Organization<\/td><\/tr>
      Preference Level<\/td>Client<\/td>Default level applied when the user works under that role<\/td><\/tr>
      Access Advanced<\/td>Checked<\/td>Shows if the role includes advanced access<\/td><\/tr>
      Can Report<\/td>Checked<\/td>Shows if the role can generate reports<\/td><\/tr>
      Can Export<\/td>Checked<\/td>Shows if the role can export data<\/td><\/tr>
      Active<\/td>Checked<\/td>Shows whether the role assignment is currently active<\/td><\/tr>
      Role Type<\/td>System Support<\/td>Classification of the role, such as Tenant or System Support<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      \"TenthPlanet-iDempiere-SystemAdmin-AllUsers-3\"<\/figure>\n\n\n\n
      Common Issues and Resolutions<\/strong><\/h2>\n\n\n\n
      Issue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>
      A newly created account does not appear in the list.<\/td>The window was not refreshed after the account was created.<\/td>Click refresh or reopen the window to reload the list.<\/td><\/tr>
      Changes typed into a field are not saved.<\/td>All Users is a read-only window and does not allow edits.<\/td>Open the User window under the relevant tenant to make changes.<\/td><\/tr>
      A user does not show the expected roles.<\/td>The role was never assigned in the User window.<\/td>Assign the role from the User Roles tab of the User window, then check again here.<\/td><\/tr>
      An account shows a Date Account Locked value.<\/td>Failed Login Count reached the limit set by the password rules.<\/td>Reset the lock from the User window or review the password rule settings.<\/td><\/tr>
      A user cannot log in even though Active is checked.<\/td>The account may be expired, or the assigned role may be inactive.<\/td>Check the Expired field and confirm the role status in User Roles.<\/td><\/tr>
      A non-administrator asks why they cannot open All Users.<\/td>The window is limited to the System Administrator role by design.<\/td>Confirm the request needs system-wide visibility before changing access.<\/td><\/tr>
      The same user name appears more than once.<\/td>Separate accounts exist under different tenants with similar names.<\/td>Check the Tenant column to confirm which account belongs to which tenant.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      Next Steps<\/strong><\/h2>\n\n\n\n
        \n
      • User window \u2013 create or update individual user accounts.<\/li>\n\n\n\n
      • Role window \u2013 define or adjust the roles referenced in User Roles.<\/li>\n\n\n\n
      • Password Rule window \u2013 configure account lockout and expiry behavior.<\/li>\n\n\n\n
      • Role Data Access window \u2013 review the data access granted to a role.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
        Introduction The All Users window in iDempiere shows every user account created across all tenants in a single list, along […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[38],"tags":[],"class_list":["post-21987","post","type-post","status-publish","format-standard","hentry","category-master"],"acf":[],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/21987","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=21987"}],"version-history":[{"count":1,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/21987\/revisions"}],"predecessor-version":[{"id":21994,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/21987\/revisions\/21994"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=21987"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=21987"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=21987"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}