How to Manage Users, Operators, and Groups in Iperius One

To manage users, operators, and groups in Iperius One , use the Users and Groups sections of the dashboard. From the Users section, you can create new accounts, assign authorized groups, enable two-factor authentication, and configure policy notifications.

Groups allow you to organize devices by customer, company, location, or department and determine which users can view and manage them. Proper configuration reduces unnecessary access and makes IT infrastructure administration more secure.

What are users, operators, and groups for?

Iperius One allows you to separate access to the platform based on the responsibilities of the people who manage devices, backups, monitoring, and remote connections.

The three main elements are:

1. Admin users: accounts created directly from the Iperius One platform
2. Users and Operators: operator accounts created through Iperius Remote and also displayed in Iperius One
3. Groups: Logical groupings of devices and users, which can be used for customers, companies, locations, or departments

This organization allows you to prevent each person from being able to see or manage all the devices in the license.

What is shown in the Users section?

The Users section contains the accounts associated with the Iperius One license.

The initial situation depends on the products already used:

• if you don’t use Iperius Remote, initially only the Iperius One account you logged in with is shown
• If you already have Iperius Remote, previously created users and operators are also shown

From the list you can check the existing accounts and use the available commands to manage their configuration, groups and security.

How to create a new user in Iperius One

1. Access the dashboard

Open Iperius One and log in with the Master Account or with an account authorized to manage users.

2. Open the Users section

From the side menu, click Users . The page displays all accounts currently associated with the license.

3. Click Add User

At the top right of the page, select Add User .

4. Enter user data

Fill out the required information, including:

• email
• name
• surname
• role
• authorized groups
• password
• confirm password

The username used to access the platform corresponds to the email address entered.

5. Assign authorized groups

You can decide whether to assign all groups or select only the ones the user needs to manage.

For a more secure setup, only assign the customers, locations, or devices needed for the user’s tasks.

6. Set up a strong password

Set a password that is different from those used for other services and difficult to guess.

The password should:

• be long enough
• contain different characters
• do not include your name, company, or email address
• not to be shared with other operators
• be stored in a corporate password manager

7. Save the user

Check your data, assigned groups, and password, then click Save .

The new account will be added to the list of users associated with the license.

How to enable 2FA for a user

Two-factor authentication adds a second layer of verification beyond your password.

To enable it:

1. open the Users section 
2. select the account concerned
3. open the edit settings
4. enable the 2FA option 
5. complete the required configuration
6. save changes

How to configure policy notifications

For each user you can configure the reception of notifications generated by Iperius One policies.

Warnings may include, for example:

• CPU thresholds exceeded
• high RAM usage
• insufficient disk space
• connecting or disconnecting devices
• other conditions configured in the policies

Assign notifications only to users who need to investigate the event or take action on the device.

How to manage Iperius Remote operators

The User and Operator accounts in Iperius One derive from the user management of Iperius Remote.

These accounts are especially suitable for technicians who need to:

• connect to customers’ computers
• provide remote assistance
• access only certain groups
• be identified in the session history
• appear in remote connection statistics

When an operator is assigned to a group, he can also use the authorized devices in the Iperius Remote shared address book.

How to create a group in Iperius One

1. Open the Groups section

From the dashboard side menu, select Groups .

The page shows the groups already created and the number of devices and users associated with them.

2. Click Add Group

At the top right of the page, click Add Group .

3. Enter the name and description

Choose a name that immediately identifies the purpose of the group.

You can use, for example:

• Customer Smith
• London headquarters
• Production server
• Administration stations
• Level 1 assistance devices
• Test computer

In the description you can add more information about the group’s function.

4. Select users

Associate the users or operators who need to view and manage its devices to the group.

Administrators are managed according to the platform settings, while other users must be selected based on their authorized activities.

5. Select devices

In the dedicated field, select the computers that should belong to the group.

The same organizational model can be used to separate:

• different customers
• geographical locations
• company departments
• server e workstation
• production and test systems
• devices with different levels of criticality

6. Enter your contact information

You can complete the group profile with data such as:

• e-mail address
• telephone number
• physical address
• customer or office references

In this way the group can represent a real managed organization or company.

7. Create the group

Review the users, devices, and information you entered, then click Create .

The group will be shown in the list and can be used to organize devices, permissions, filters, and remote address book.

Why do groups improve safety?

Groups allow you to apply the principle of least privilege: each user sees only the devices necessary for their work.

Proper separation reduces the risk that an operator:

• access unassigned customer devices
• you initiate a remote connection to the wrong computer
• you see irrelevant information
• you modify configurations outside of your scope
• receive notifications about infrastructure you don’t manage

How to Organize Groups in an MSP Environment

An MSP can create at least one group for each customer and, when necessary, further subdivide the devices by location or service.

Example:

• Customer Smith – Server
• Customer Smith – Workstation
• White Client – ??London Office
• White Client – ??Burmingham Office
• Green Client – ??Critical Systems

Each technician can only be assigned to customers within their area of ??expertise.

How to organize groups in a company

An organization can use groups to separate devices based on:

• site;
• department;
• business function;
• device type;
• criticality level;
• IT manager.

Examples:

• Headquarters;
• Northern Branch;
• Administration;
• Production;
• Corporate Servers;
• Management devices.

Conclusion

The Users and Groups sections of Iperius One allow you to organize access to the platform and managed devices.

Accounts created directly in Iperius One have the Admin role, while User and Operator accounts come from Iperius Remote. For each user, you can assign groups, enable 2FA, and configure policy notifications.

Groups allow you to associate devices and users by customer, company, location, or department, helping to limit access and build a tidy and secure remote address book.

Frequently asked questions about managing users and groups