---
title: "Managing users with email authentication"
slug: "managing-users-with-email-authentication-in-business-applications"
updated: 2026-09-18T05:57:01Z
published: 2026-09-18T05:57:01Z
canonical: "docs.turbo360.com/managing-users-with-email-authentication-in-business-applications"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.turbo360.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing users with email authentication

## Overview

This article describes how to add, manage, and remove users in Business Applications when your Turbo360 account uses email authentication.

### Business value

Controlling who can access Business Applications (and at what permission level) reduces the risk of unauthorized changes and ensures teams operate within defined boundaries. Role assignments can be scoped to the entire module or to individual Business Application groups and applications, giving you precise control over access.

## Prerequisites

### Required permissions

| Role | Access |
| --- | --- |
| Account owner | Full access: add, update, and remove users |
| Owner | Full access: add, update, and remove users |
| Custom role with **Manage users** enabled | Full access: add, update, and remove users |
| Custom role without **Manage users** | No access to user management |

To perform user management operations, you must have the **Account owner** or **Owner** role, or a custom role with the **Manage users** permission enabled. Account owners can enable this under **Specify management permissions** when configuring a custom role.

## How it works

Business Applications supports two role assignment models:

- **Direct role assignment:** assigns a role to a user that applies across the entire module. For example, assigning the Reader role gives the user read access to all Business Application groups and applications.
- **Specified access:** assigns different roles on different module-specific areas. Use this when a user should only see a subset of groups or applications. For example, a contractor can be given access to the Development group only, without seeing Production or Staging.

When specifying custom permissions, access is granted hierarchically. Selecting a Business Application group automatically includes all its child groups and applications. Assigning a role to a selected group applies that role to all items within it.

Users who are already members of Turbo360 (through another module, or with no module permission) can be added from the **Existing user** tab instead of being invited fresh.

## Steps

Use the following steps to add, update, and remove users in Business Applications. Navigate to the **User management** section in the Business Application module to get started.

### Add a user

Adding a user sends an email activation link and grants them access to the module once they confirm.

1. Click **Add user** in the **Users** tab.
2. Enter the user's name and email address.
3. Assign a role: either as a direct role or with specified access.
4. Click **Add**.

An email activation link is sent to the user. The link is valid for 3 days. If it expires, resend the activation email from the user list.

              
              

The activation link is valid for 3 days, after which the account owner or owner must resend the activation email.

### Update user permissions

Updating permissions lets you change a user's role scope; for example, switching from direct access to specified access, or restricting a user to a different set of groups.

1. Navigate to the **User management** section of the module.
2. Click the **Edit permission** icon next to the user.
3. Update the role: either at a specified level or as a direct role.
4. Click **Update**.

To update permissions for multiple users at once:

1. Select the users whose roles you want to update.
2. Click **Edit permission** at the top of the list.
3. Assign a role: either at a specified level or as a direct role.
4. Click **Update**.

The selected role is applied to all chosen users.

### View and manage access at a specified level

Viewing access at the group or application level lets you audit and revoke permissions for a specific scope without opening the full user list.

To view users with access to a specific Business Application group, click the **Context menu ( ⋮ )** next to the group in the tree view and select **Users**.

To view users with access to a specific Business Application, click the **Context menu ( ⋮ )** next to the application in the tree view and select **Users**.

You can also view users for a Business Application by clicking **Users > manage** in the Business Application overview.

              
              

Only users with direct access to a Business Application or group can have their access revoked from the **Users** widget at that level.

### Remove a user

Removing a user revokes their access to the Business Application module. The user remains in Turbo360's directory and can be re-added later.

- To remove a single user, click the **Remove user** icon next to the user.
- To remove multiple users, select them and click **Remove** at the top of the list.

              
              

A user removed from a module still exists in Turbo360's directory. To remove them from Turbo360 entirely, navigate to **Settings** > **Users** and select **Remove user**.

## Example scenario

A team has three Business Application groups: Production, Staging, and Development. A new contractor joins and needs read access to Development only. An owner adds the contractor, selects **Specified access**, and assigns the Reader role to the Development group only; leaving Production and Staging inaccessible. When the contractor's engagement ends, the owner removes the user from the module.

## Troubleshooting

1. **Activation email not received** Cause: The email may have been filtered as spam, or the address was entered incorrectly. Fix: Ask the user to check their spam folder. If the email is incorrect, remove the user and re-add them with the correct address. If the link has expired (after 3 days), resend the activation email from the user list.
2. **Cannot see the Add user option** Cause: Your role does not have permission to manage users. Fix: Only users with the Account owner, Owner role, or a custom role with **Manage users** enabled can add users. Contact your account owner to request the appropriate access.
3. **Bulk Edit permission option is greyed out** Cause: No users have been selected in the list. Fix: Select one or more users using the checkboxes before clicking **Edit permission**.
4. **User is not visible in the Users tab after being added** Cause: The user has not yet clicked the activation link in the invitation email. Fix: Ask the user to click the activation link. If the link has expired, resend the activation email.
5. **Cannot revoke access from the Business Application's Users widget** Cause: The user has specified access (not direct access) at this level. Fix: Go to the full **User management** section and update or remove the user's permissions from there.

## Related articles

- [Business Applications quick start](https://docs.turbo360.com/docs/business-applications-quick-start)
- [Roles and permissions in Business Applications](https://docs.turbo360.com/docs/roles-and-permissions-in-business-applications)
- [Managing users with Microsoft Entra ID](https://docs.turbo360.com/docs/managing-users-with-microsoft-entra-id-in-business-applications)
- [Business Applications user activities](https://docs.turbo360.com/docs/business-applications-user-activities)
- [Managing Business Applications](https://docs.turbo360.com/docs/managing-business-applications)