Introduction
Managing users effectively in SurePact ensures that the right team members have the appropriate level of access to records and system functions. SurePact uses a combination of User Types and Record Roles to define permissions at both the organisation-wide and record-specific levels.
This guide explains User Types, how they differ from Record Roles, and how to add, edit, and manage users within your SurePact tenancy.
π For assigning members to specific records, please see Understanding Default Members, Roles & Permissions.
User Types vs. Record Roles
User Types (Organisation-Wide Access)
User Types define what a person can access across all of SurePact, including administrative features, user management, and system-wide settings. These are assigned by an Administrator and apply to the entire tenancy.
User Type | Description | Who Typically Has This? |
---|---|---|
Active | Standard user with access to SurePact based on their assigned Record Roles. | All general users |
View Only | Can view records but cannot edit them. | Oversight roles, executives |
Locked | Cannot log into SurePact. Used for offboarding users. | Former employees, inactive users |
Default Member | Automatically assigned to all records unless manually removed. | Senior staff needing full visibility |
Hide Financial Data | Cannot view financial fields within records. | Contractors, external stakeholders |
Customer Administrator | Can manage users and system configurations. | IT leads, finance leads, strategic sponsors |
System Administrator | Reserved for SurePact Support Team. | SurePact internal use only |
SSO Enabled | Indicates if the user logs in via Single Sign-On (SSO). | Organisations using SSO |
Contractor | Identifies external contractors (does not impact permissions). | Contractors, vendors |
π‘ Tip: Most users are Active Users, with access limited by their Record Roles rather than their User Type.
Record Roles (Access Within Specific Records)
Unlike User Types, Record Roles define what a user can do within a specific record (e.g., grant, project, contract, or portfolio). Record Roles are managed at the record level by the Record Manager.
β Record Roles include:
-
Record Owner (Oversight, no edit rights)
-
Record Manager (Day-to-day execution, can assign members)
-
Record Member (Limited editing, can complete tasks)
-
Approver (Can approve but not edit records)
π For a detailed breakdown of Record Roles & Permissions, see Understanding Default Members, Roles & Permissions.
Adding & Managing Users
How to Add a New User
-
Navigate to Administration > Users.
-
Click Add User (β).
-
Enter the userβs details (Name, Email, Department, and Business Unit).
-
Assign a User Type (e.g., Active, Customer Administrator).
-
If applicable, select Default Member to provide automatic access to all records.
-
Click Save Changes.
π‘ Tip: Users receive an email invitation once added.
Editing an Existing User
-
Navigate to Administration > Users.
-
Select the user you want to edit.
-
Update their User Type, Department, or Business Unit.
-
Click Save Changes.
β οΈ If a user changes roles internally, update their permissions to match their new responsibilities.
Offboarding & Locking Users
When a user leaves your organisation or no longer requires access, you must lock their account to ensure compliance and governance.
Steps to Offboard a User:
-
Navigate to Administration > Users.
-
Select the user you wish to offboard.
-
Before locking the user, transfer their assigned records to another user using Delegations.
π For step-by-step instructions, see Creating Delegations in SurePact.
-
Once delegations are complete, uncheck all User Types and select only Locked.
-
Click Save Changes.
π‘ Tip: Locking a user prevents them from logging in while retaining their historical activity for audit purposes.
Best Practices for User Management
β Use individual email addresses (e.g., georgie.craft@regionofmagic.tas.gov.au) instead of shared accounts for better governance.
β Assign Customer Administrator access only to key personnel (e.g., IT leads, finance managers).
β Review user access periodically to remove inactive users or adjust permissions as needed.
β Use Default Members for teams needing full record visibility, rather than manually adding users to each record.
β Update permissions when staff change roles to ensure proper record access.
β Always complete a Delegation before locking a user account to maintain ongoing record access.
Troubleshooting User Access Issues
β User cannot see a record β Ensure they are assigned as a Record Member.
β User cannot edit financial fields β Check if Hide Financial Data is enabled.
β User cannot log in β Ensure they are not marked as Locked or check if SSO is required.
β User not receiving notifications β Verify their email is correct and that notifications are enabled.
π For further assistance, contact your SurePact Administrator or log a Support Ticket.