Managing Inactive Users and App Ownership

This guide provides best practices for what to do when a user no longer needs access to Dash Enterprise.

You must be an administrator to view and manage the owners of all apps on Dash Enterprise as well as delete users.

Transferring Apps

Dash Enterprise supports transferring apps to another user, as long as both users have license seats.

Transferring apps transfers any resources—workspaces, Redis databases, and Postgres databases—that are attached to the apps. It also preserves all the access options and settings saved in the App Info such as viewer access, co-owners, portal visibility, environment variables, and contact information.

You can transfer apps one at a time or all of a user’s apps in one go. If you need to transfer apps that no longer have an owner because the user was deleted, you must do so one at a time from the App Ownership tab.

Transferring a Single App to a New Owner

Prerequisite:

To transfer an app to a new owner:

  1. In the App Manager, go to Platform and Users. Remember that you need the admin role to be able to access platform and user information.
  2. Go to the App Ownership tab.
  3. Find the app whose owner you want to change.
  4. Next to the app name, select More <img> > Change Owner.
  5. Select a new owner.
  6. Select Save.

The new owner now has permission to work on and configure the app as though they created it. Review the permissions that app owners have.

You can also edit the app co-owners by selecting More <img> > Edit Co-Owners.

Users are not notified when they receive ownership of apps, but can see their newly owned apps at https://&lt;your-dash-enterprise-server&gt;/apps under My Apps.

If the former owner of the transferred app no longer needs their license seat, you can revoke it by unassigning the licensed_user role in Keycloak (or, if you delete the user, their license seat is revoked automatically).

Bulk Transferring Apps to a New Owner

Prerequisite:

To transfer all of a user’s apps to a new owner:

  1. In the App Manager, go to Platform and Users. Remember that you need the admin role to be able to access platform and user information.
  2. In the Users tab, find the user whose apps you want to transfer.
  3. Next to the user’s name, select Transfer User Apps <img>.
  4. Review the list of apps that will be transferred.
  5. Select a new owner.
  6. Select Transfer Apps.

<img>

The new owner now has permission to work on and configure the apps as though they created them. Review the permissions that app owners have.

Users are not notified when they receive ownership of apps, but can see their newly owned apps at https://&lt;your-dash-enterprise-server&gt;/apps under My Apps.

If the former owner of the transferred apps no longer needs their license seat, you can revoke it by unassigning the licensed_user role in Keycloak (or, if you delete the user, their license seat is revoked automatically).

Deleting Users

Deletion is the recommended way to manage users who no longer need access to Dash Enterprise. Deleting users makes them unable to log in, removes all references to them in the Dash Enterprise App Manager and Portal, and, if they had a license seat, makes the license seat available to be allocated to a different user.

Deleting a user does not delete any apps that they own.

To delete a user that you created in Keycloak:

  1. Make sure that if the user owned any apps, you’ve transferred them to a new owner.
  2. Go to Keycloak at https://auth-&lt;your-dash-enterprise-server&gt; and select Administration Console.
  3. Enter the credentials that were stored as part of your Dash Enterprise installation; then select Sign In.
  4. Go to Users.
  5. Find the user that you want to delete.
  6. Select the user; then select Action > Delete.

<img>

  1. In the confirmation message that appears, select Delete.

To delete a user that you synced from an LDAP IdP:

  1. Make sure that if the user owned any apps, you’ve transferred them to a new owner.
  2. In your LDAP IdP, delete the user.
  3. If you turned on Periodic Changed Users Sync in Keycloak, the change is applied to Dash Enterprise during the next sync. If you’re not syncing changed users periodically, or if you want to apply the change immediately, perform a manual sync:
  4. Go to Keycloak at https://auth-&lt;your-dash-enterprise-server&gt; and select Administration Console.
  5. Enter the credentials that were stored as part of your Dash Enterprise installation; then select Sign In.
  6. Go to User Federation; then select the LDAP IdP that you configured.
  7. At the bottom of the page, select Synchronize Changed Users.

To delete a user that you imported from a SAML or OIDC IdP:

  1. Make sure that if the user owned any apps, you’ve transferred them to a new owner.
  2. Follow your organization’s best practices to make the appropriate change in your SAML or OIDC IdP.
  3. Go to Keycloak at https://auth-&lt;your-dash-enterprise-server&gt; and select Administration Console.
  4. Enter the credentials that were stored as part of your Dash Enterprise installation; then select Sign In.
  5. Go to Users.
  6. Find the user that you want to delete.
  7. Select the user; then select Action > Delete.

<img>

  1. In the confirmation message that appears, select Delete.