User Management

Last Updated: April 07, 2026

How you manage user access to the Admin Console and portals depends on the strategy that your organization uses to manage access. There are three primary ways to manage Admin Console user access:

• Identity Providers (IdPs) An identity provider (IdP) is a system entity that creates and manages identity information for an organization and can be authenticated by a computer system or network. An IdP is referred to as a security principal in Java and Microsoft documentation. An IdP also provides authentication services to relying apps in a federation or distributed network., such as Okta, Entra ID (Azure AD), etc.
• Lightweight Directory Access Protocol (LDAP) A Lightweight Directory Access Protocol (LDAP) is a lightweight client-server protocol for accessing directory services, specifically X.500-based directory services. LDAP runs over TCP / IP or other connection-oriented transfer services. The most common use is to provide a central location for accessing and managing directory services. LDAP also functions as an identity- and access-management solution. connection.
• Vasion Print (local) users.

Key Points

The Root Account is the first account created in the instance and can be updated or disabled. There are two types of administrator accounts that you can add users to: Administrator and Non-Administrator. Note the following when adding users:

• PrinterLogic users are local accounts that are not tied to an LDAP or IdP configuration.
• Even though Active Directory users and LDAP users are both verified through the LDAP settings, the difference is the way that LDAP is configured in Vasion Print.
  • Select Active Directory Group / User to locate a user from the domain to which the Windows device is connected.

  • Select LDAP Group / User to use an interface other than Windows to add a user. For example, a Mac interface, a Linux interface, or if you have advanced settings configured and need to locate a user from a domain other than the one to which the Windows device is connected.

    The LDAP Group / User option only appears if you set up an LDAP domain in the Admin Console and you turn on the Enable advanced LDAP administrative authentication option. For more details refer to LDAP Domain.

• IdP users and groups are only searchable if the IdP is configured and the users or groups are provisioned. For more details refer to Identity Providers (IdPs).
• Active Directory and LDAP user credentials are both verified through the configured LDAP domain settings. PrinterLogic users are verified through the instance An instance is a collection of services and service groups that is associated with a customer. A customer's instance is created from an app template and is then deployed to a cloud or virtual server. database. IdP users are verified through the IdP.

User Roles

When you give users Admin Console access, you must assign a role to each user.

Role-Based Access Control (RBAC) is a method of granting access to the Admin Console based on the user's role. Vasion Print comes with several predefined (Standard) roles and the option to create user-defined (Custom) roles for Administrator and Non-Administrator access. These roles define access and the ability to change settings and objects in the Admin Console.

For more details refer to Role-Based Access Control (RBAC).

The Vasion Print Users tab is only for user accounts that need access to the Vasion Print Admin Console. To add users with access to only Vasion Automate features, such as Forms and Workflow, refer to Create a New Account.