Skip to content

Users

Where to find it
Administration → Users
Who can use it
Administrators with user-management access

The Users page lists everyone who can sign in to your Nextal account. From here you add users, edit their details, set or reset their password, choose the security group that controls what they can access, and activate or deactivate accounts.

The Users page. Each row is one account; the ⋯ menu holds Edit, Edit password, Resend login instructions, Disconnect and Activate/Deactivate.

The “Seats” card

If your plan has license levels, a Seats card above the list shows, for each seat pool (Director, Manager), how many seats are used. When a pool is full, choosing a group of that level is locked in the user’s panel; reactivating a user is also refused if no seat is left. A technical account uses no seat. A level change applies at the person’s next sign-in.

The user list

Each row is one user account and shows:

  • User — name and email, with the person’s initials.
  • Level — the license level of the person’s security group.
  • Group — the security group assigned to the user.
  • Last connection — when the user last signed in, as a relative time (for example “3 days ago”), or Never.
  • Sign-in — a Can sign in or Cannot sign in pill, with a tooltip giving the reason (see below).
  • Active — a switch: turning it off asks for a confirmation (see below); turning it back on is refused if no seat is left.
  • The ⋯ menu with Edit, Edit password, Resend login instructions and Disconnect (shown for activated accounts only).

You can search by name or email (accent-insensitive), filter with All groups, All levels and the date ranges, show deactivated accounts with Show inactive, sort, and page through the list. The Import, Export and Disconnect everyone buttons are at the top of the list.

Can sign in or cannot sign in

The Sign-in column tells you whether the person can sign in to Nextal right now. It runs the same checks as the sign-in screen: a user Can sign in only when all of them pass. Otherwise they show Cannot sign in, with the reason below the status.

Reason shownWhat it meansHow to fix it
DeactivatedThe account is deactivated.Turn the Active switch back on.
Account lockedThe account is locked.Contact Nextal support to unlock it.
Account expiredThe account is marked as expired.Contact Nextal support.
Password expiredThe credentials are marked as expired.Contact Nextal support.
Access ended date (for example “Access ended Sep 12, 2026”)The user’s end date has passed.Edit the user to change or clear the end date.
Access starts dateThe user’s start date hasn’t arrived yet.Edit the user to change the start date.

Hover over the status (or give it keyboard focus) to see every reason and how to fix each one; when several reasons apply, the first is shown, followed by “+1”, “+2”, and so on.

Activate only changes whether the account is activated: a user whose end date has passed stays Cannot sign in until their end date is changed or cleared.

Adding a user

Click the add button to open the side panel and fill in:

  • First name and Last name — required.
  • Email — required; the address the user signs in with.
  • Access from and Access until — the period the account is valid.
  • Send login instructions by email — on by default. Nextal generates the password and emails the new user a secure one-time link to reveal it; no password field is shown while it’s on. Turn it off to set a Password yourself (at least 10 characters) — type one, or click Generate password to create a strong one and Copy it. See New-user login information.
  • Type — leave it as a regular user, or turn on Technical account. (Technical accounts aren’t assigned a security group.)
  • Security group — for a regular user, pick from the list, grouped by license level, the group that controls what they can access.

Click Save to create the account (Cancel discards).

Editing a user

Click a row (or ⋯ → Edit) to reopen the side panel and update their first and last name, email, access dates, type, and security group; Save applies, Cancel discards. The password isn’t changed in the fields: the panel’s Access section offers Edit password, Resend login instructions, Disconnect from all sessions and Deactivate. Changing a person’s level signs them out so the change applies; a notification says so.

Setting or resetting a password

Choose Edit password (row ⋯ menu, or the panel’s Access section) to set a new one — type a password or Generate a strong one, Copy it, and Save. To instead let the user retrieve a password themselves, use Resend login instructions — see New-user login information.

Activating and deactivating

With the row’s Active switch (or Deactivate in the panel), deactivate a user to remove their access (for example when someone leaves): a confirmation window appears first. Turn the same switch back on to restore access. Deactivating now also signs the user out immediately: if they were connected, their session ends on their next action — they can no longer stay connected until the session expires. Deactivating keeps all of the user’s history intact.

Disconnecting users

Disconnecting someone ends their open session without changing their account: they are signed out on their next action and can sign back in, unless they were also deactivated. This is useful when someone leaves or during a security incident.

  • Disconnect one person — in the ⋯ menu on their row, or with Disconnect from all sessions in the panel, choose Disconnect (shown for activated accounts only), then confirm. The person is signed out on their next action.
  • Disconnect everyone — the secondary Disconnect everyone button at the top of the list ends every open session on the account, after confirmation. Your own session is never ended — you stay signed in, and a notification tells you how many people were disconnected.

For the step-by-step, see Disconnecting users.

Security group

Each regular user is assigned one security group, which controls what they can see and do across Nextal. See Security groups for how groups and their permissions work.

Exporting the user list

At the top of the list, the secondary Export button downloads the users to an Excel file (.xlsx). The export reflects exactly what’s filtered on screen — the current search, filters, and sort are preserved. The button appears with the same user-management permission as the page.

Clicking Export opens a side panel (Export data) where you choose which columns to include — the default set matches the import template exactly, so the file re-imports with no manual mapping. There is no password column: passwords are never exported.

For the step-by-step and the Excel round-trip, see Exporting users.

Bulk import users (CSV)

Instead of creating accounts one at a time, you can import several at once from a CSV or Excel file. From the user list, click Import to open a dedicated wizard (its own page, not the side panel). The button is visible with the same user-management permission as the page.

The bulk import wizard. All four steps stay visible at the top.

The four steps

StepNameWhat happens
1Upload FileDrop a CSV or Excel file (.csv, .xlsx, .xls), up to 10 MB. A sample template is downloadable from this step.
2Map ColumnsTell Nextal which file column maps to which user field. It guesses for common headers — double-check. Required columns: First Name, Last Name, Email.
3ConfigureChoose the import mode and the defaults for new users. A preview of the transformed data shows at the top.
4ImportThe import runs row by row with live progress and counters (Created, Updated, Deactivated, Failed).

Step 1 — Upload your file

Accepted formats: CSV (.csv) and Excel (.xlsx, .xls), 10 MB maximum. The first row must contain the column headers; empty rows are skipped. Click Download Sample Template below the drop zone to start from a ready-to-fill file.

The template has one column per field:

ColumnRequiredNotes
firstName (First Name)yes—
lastName (Last Name)yes—
email (Email)yesLower-cased; it’s the sign-in identifier and the matching key.
password (Password)noLeave blank to have a password generated automatically.
userSecurityGroup (Security group)noGroup name, level or id. Blank ⇒ the Configure-step default applies.
technical (Technical account)notrue or false.
startDateTime (Start date)noISO date (for example 2026-01-15).
endDateTime (End date)noISO date.

Step 2 — Map columns

One row per column in your file, with a user-field dropdown and a sample of values to check against. The wizard pre-fills the matches it recognizes (common EN/FR/ES headers). The three required fields — First Name, Last Name, Email — must be mapped before Next is enabled.

Step 3 — Configure: import mode and defaults

Pick the import mode, then the defaults applied to newly created accounts.

The Import mode offers two choices:

  • Add / Update (default) — users in the file are added; existing users (matched by email) are updated with the file’s values. Only fields present in the file are changed; the password is never touched on an update.
  • Replace — same as Add / Update, and every user who is not in the file is deactivated.

Below the mode, the Defaults for new users section — applied only to created users where the file has no value — lets you set, for the whole batch: the User Security Group, the Technical Account option, the Start Date, and the End Date.

Step 4 — Import

Click Start Import. The import runs row by row with a progress bar and counters — Created, Updated, Deactivated, Failed. In Replace mode, the confirmed deactivations run after the creates and updates, and each deactivated account is also disconnected immediately; a Disconnected counter is then added. Failed rows appear in a table; the Retry Failed button re-runs the import.

Passwords for new users

Accounts created by the import receive an automatically generated password (unless you supply a password column). Because that password isn’t shared with anyone, ask each new user to use the Forgot password link on the sign-in screen to set their own. You can also assign a password manually via Edit password in the user list.

Tips

  • Deactivate accounts as soon as someone leaves so access is removed right away — their history stays intact.
  • Set an end date for temporary or contract users so their access expires on its own.
  • Share generated passwords securely, and have the user change theirs after the first sign-in.