# Users # Users The **Users** section of the dashboard (*Dashboard* → *Users*) lists all users configured in your account. From this page, you can search for users, open the user editor, create new users, and delete users that are not currently associated with devices. ## Search At the top of the page there is a search field with the label **Search** and the placeholder **Name, username or email**. The list updates automatically after you stop typing. ## Users table Users are displayed in a sortable, paginated table. Clicking a row opens the user editor. ### Columns - **Id**: internal user identifier. - **First name**: user first name. - **Last name**: user last name. - **Username**: username (often a directory username). - **Email**: user email address. - **Devices**: number of devices currently associated with the user. - **WiFi certificate**: indicator showing whether a Wi‑Fi certificate is assigned to the user. ### Refresh and pagination - The refresh action reloads the list. - The table is paginated (10/25/50 items per page). ## User actions ### Create new user Use **Create new user** to open the user creation dialog. This action is disabled when your license is expired. ### Sync from Google Workspace If Google Workspace directory sync is available for your account, the page shows **Sync from Google Workspace**. When you start a sync, a progress indicator is shown while the request is running. ### Delete a user You can delete a user only when the user is not associated with any device (the **Devices** column must be 0). The delete action is disabled when your license is expired or terminated. ### Multi-row selection and bulk deletion From the action bar below the table you can enable multi-row selection. In this mode you can select multiple users and delete them in bulk. - **Eligibility**: only users with **Devices** = 0 can be selected for deletion. - **Select all**: the **All** checkbox selects all eligible rows on the current page. - **Bulk delete**: **Delete selected users** is disabled when no rows are selected, or when your license is expired or terminated. ## Wi‑Fi certificates and EAP The **WiFi certificate** column shows whether a certificate is currently assigned to a user. User certificates are typically used for Wi‑Fi EAP (for example EAP‑TLS) configurations. For certificate assignment and management, see [**Certificate management**](https://enterprise.cerberusapp.com/docs/books/user-manual/page/certificate-management "Certificate management"). # User editor The user editor is available from *Dashboard* → *Users* by clicking a user row. It lets you edit user details, configure per-user Wi‑Fi EAP credentials, and view the user’s associated devices. ## User details The top section contains the user’s main fields. Some fields are required and the editor shows validation errors when they are missing or invalid. - **Id**: read-only identifier. - **First name**: required. - **Last name**: required. - **Username**: required. - **Email**: required and must be a valid email address. - **Telephone number**: optional. - **Google account**: optional and must be a valid email address when provided. ## Google Authentication Default Policy In Google Workspace environments with Google Authentication enabled, the editor can show **Google Authentication Default Policy**. This is the policy applied to devices enrolled using Google Authentication by this user. - **Change policy**: opens the policy selection dialog. - **Open policy**: opens the selected policy in the policy editor (when a policy is set). - After selecting a new default policy, you must save the user to apply the change. The editor shows a notification reminding you to save. ## Wi‑Fi EAP credentials The **WiFi EAP credentials** section is used to configure per-user credentials that are automatically installed on the user’s devices when their assigned policy contains a Wi‑Fi EAP configuration that requires them. The Wi‑Fi EAP configuration is part of the Android policy [network configuration](https://enterprise.cerberusapp.com/docs/books/user-manual/page/networking "Networking"). ### Client certificate You can optionally assign a client certificate to a user. When a certificate is assigned, it is shown in the **Client certificate** field and a menu provides actions. When no certificate is assigned, the field shows **No certificate assigned** and you can assign one. - **Assign certificate**: opens the certificate selection dialog. - **Open certificate**: opens the certificate editor. - **Change certificate**: selects a different client certificate. - **Disassociate certificate**: removes the certificate from the user. The system also removes the certificate from all devices associated with this user. For certificate import and management, see [**Certificate management**](https://enterprise.cerberusapp.com/docs/books/user-manual/page/certificate-management "Certificate management"). ### Identity, anonymous identity, and password - **Identity**: identity of the user. For tunneling outer protocols (PEAP, EAP‑TTLS) this is used inside the tunnel. - **Anonymous identity**: used for tunneling outer protocols as the identity presented outside the tunnel. When not specified, it defaults to an empty string. - **Password**: the user password for EAP methods that require it. If not specified, the device can prompt the user. A show/hide action toggles password visibility. ## Associated devices The **Associated devices** section shows the list of devices currently linked to the user. If the user has one or more associated devices, the user cannot be deleted. ## Save and delete - **Save user**: enabled only when the form is valid, there are pending changes, and the license is active. A progress indicator is shown while saving. - **Delete user**: disabled when the user is associated with devices or when the license is expired/terminated. When deletion is allowed, a confirmation dialog is shown. If the user is assigned to enrollment tokens, the dialog warns that devices enrolled with those tokens will no longer be assigned to a user. ## Unsaved changes warning If you have unsaved changes and try to leave the page, the dashboard asks whether you want to discard the changes.