---
title: "User management (Standalone)"
slug: "user-management-standalone"
updated: 2025-06-04T15:32:19Z
published: 2025-06-04T15:32:19Z
canonical: "help.nucleussec.com/user-management-standalone"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.nucleussec.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User management (Standalone)

This article provides an overview of how to use Nucleus without using Single Sign-On (SSO) with your Identity Provider (IdP). It covers inviting and removing users, multi-factor authentication, and other user security controls.

## User management

Users are centrally managed at the organization level in the Global Dashboard as well as on a per-project level. Users can be invited and added to one or more projects with user access roles at once at the organization level, or invited and added to individual projects at the project level. Once added, the full lifecycle of a user can be managed at the organization level, such as updating their project access, disabling and re-enabling their accounts, and removing them entirely from your Nucleus organization.

Required PermissionsYou must be an **Organization Admin** to manage users at the organization level, and a **Project Admin** to manage them at the project level. 

### Managing users at the organization level

#### Steps to invite new users to Nucleus

1. Navigate to **Global Dashboard >****Global Administration > Users**. This page includes a list of all users in your organization including their project access and permissions.
2. Click the **Invite Users** button to invite users not listed to join the Nucleus platform.
3. In the resulting pop-up, enter a list of email addresses you want to add to the organization - comma, or newline separated.  
![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/invite%20user%20global.png)
4. Use the blue plus symbol next to the project name(s) you want the new user(s) to access.
5. In the right panel, for each project you added, select the role you want the new user to have within the project.
6. Click **Invite Users**.
7. That's it! The invited users should soon receive Nucleus emails, be able to log in, and start contributing to Nucleus. These users will now appear in the User Management Section (Global Administration > Users).

#### Steps to update an existing user's projects and roles

1. Go to**Global Dashboard >****Global Administration > Users**.
2. Click the blue **Edit** button on any user to open the "Edit User" window.
3. If the user is already added to projects, you can change their role using the Role dropdowns in the Role column.  
![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/user%20add%20projects.png)
4. If the user is not added to any projects, select the project(s) where you want to add the user by clicking **Projects**on the right. Then select the role you want the user to have within that project.
5. Click the blue **Save** button to complete the process.

#### Steps to enable, disable and remove users from your Nucleus organization

1. Go to **Global Administration > Users**.
2. Select the user(s) that you'd like to enable or disable.
3. From the **Actions**drop-down click Enable, Disable or Delete.
4. Your user's access has now been updated.![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/global%20remove%20user.png) If the user was removed, all links to them will be removed from the platform.

### Managing users at the project level

#### Steps to add users at the project level

1. From within your project, navigate to **Global Dashboard > Select your project > Project Administration > User Management**.
2. Click **Invite Users**.![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/invite%20users.png)
3. Enter a list of email addresses you want to add to the organization - comma, or newline separated.
4. Select the role you want these users to have within the project.![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/invite%20user%20popup(2).png)
5. Click **Invite Users**.

That's it! All invited users will receive an email to login to Nucleus.

## User Security Controls

Nucleus provides a number of security controls for managing the security of a user's login experience, as well as their lifecycle within the platform.

### Password Policy

Passwords must meet the following requirements:

- 12 characters minimum
- May not contain “Nucleus”
- No repeating characters 3 or more times

### Multi-Factor Authentication (MFA)

Nucleus supports two forms of Multi-Factor Authentication (MFA) to protect user accounts from password brute force attacks:

1. Time-based One-time Password (TOTP) via an Authenticator app
2. TOTP emailed to the user for login

To enable MFA, follow these steps:

1. Go to **Global Administration > Users**
2. Click your user profile icon in the Nucleus toolbar.
3. In the **User Profile** pop-up, click the **2-Factor Auth** tab![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image-1713750636018.png)
4. Enter your password and click the **Enable Changes** button to proceed to the next step.
5. Click **Regenerate QR Code**.
6. Scan the **QR Code** into your preferred authenticator app.
7. Enter the resulting code in the **Authentication App Code** field and click the **Verify Code** button.
8. Click the ****Save**** button and you're done!

### Automatically Disabling Inactive Users

Users that have not logged into Nucleus after a period of time can automatically be disabled. Follow these steps to configure this for your Nucleus organization:

1. From the **Global Dashboard**, go to **Global Administration > Organizations**.
2. Click the **Edit** button in the Actions column to the right of your organization.
3. In the **Edit Organization** pop-up modal, set the number of days of inactivity under the **Disable Inactive User After** field.
4. Click **Save**.

### User Session Timeout

You can specify the number of minutes that a user must is inactive for in a single session before being logged out of Nucleus automatically. By default, all users are logged out after 60 minutes of inactivity unless otherwise changed.

Follow these steps to configure this for your Nucleus organization:

1. From the **Global Dashboard**, go to **Global Administration > Organizations**.
2. Click the **Edit** button in the Actions column to the right of your organization.
3. In the **Edit Organization** pop-up modal, set the number of minutes of inactivity under the **Log Users Out** field.
4. Click **Save**.