In the settings section, click Users in the column on the right hand side to access the list of current users. You can add new users and remove existing ones. However, you can never delete your own user account with which you are logged in. In addition, you can change a user's password from here.
Within Playr a user's e-mail address may only occur once, because this is used as a unique user name to log in with. If you want to add a user account with an e-mail address that has been used before in another subscription, then just send us an e-mail and we'll take care of it.
Alternatively, you can also scroll down to the list of users on the company overview page (which is the first page that opens when you click Settings on your dashboard).
For extra security, we highly recommend using two-factor authentication. This way you will not only be asked for your email and password when logging in, but also for a one time code that is generated by a device that you own: your smartphone. On your smartphone you need a so called TOTP (Time-based One Time Password) authentication app, like Google Authenticator or Authy (but there are many more that you can use).
To setup two-factor authentication, select Your profile from the little person icon on the top right of the dashboard. If you have login method E-mail and password selected, you will see the Enable two-factor authentication button which you can click. The next page displays a unique QR code that you need to scan with the TOTP app of your choice. This creates an entry for Playr in the app and will show the first one-time code that you need to fill out along with your password. After this, you're good to go. The next time you log in, you will be prompted for the one time code that expires after 30 seconds as an additional login requirement.
When you add users, you can choose how you like them to log in: with their e-mail address and password or by using their existing Google or Microsoft account. In the latter case, make sure that you fill out the e-mail address of the Google or Microsoft account. Then, when that user chooses to log in with Google or Microsoft from the login page, Playr will match the user's e-mail address with the e-mail address of the Google/Microsoft account and it will log him/her into the system.
Also, when you want to use Microsoft Entra ID as single sign-on method, you need to select Microsoft as the login provider.
A user can usually have one of the following roles:
| Role | Explanation |
|---|---|
| Company administrator | In addition to being able to create, manage and publish all content as an author, this person also has access to all settings of a company, such as: company data, subscription data, user management, dashboard management, management of playback devices, overview of active screen sessions, etc. |
| Technical administrator | This person can only see the current active screen sessions and manage playback devices and activity monitors (if applicable). He/she cannot access any content or other settings. |
| Editor | This person can create, manage and publish all content on the dashboards to which he has access. |
| Author | This person can create and edit pages on the dashboards to which he has access. However, he can not publish these changes. The changes become visible only if they have been approved by an editor or company administrator. An additional restriction is that an author cannot edit pages that are used as a background page. |
When you create or edit a user, you also need to select the dashboard(s) the user should have access to. You can do this below the label Allowed to access dashboards. Please note that if you forget to select a dashboard, you will get a warning message because a user won't be able to log in without having access to at least one dashboard.
The same permission can be configured from the dashboard management page: there you can configure what users should have access to a specific dashboard.
On company level, you can configure user accounts that have been inactive for some time (3, 6 or 12 months) to be automatically purged. If you want to prevent a specific user account from being purged in this way, enable the Never automatically purge this account due to inactivity option.
You can also import multiple users at once from a CSV file. The columns need to be delimited by a semicolon. The first line in the file needs to hold the names of the properties that each column represents. These are the available properties:
| Property | Explanation / constraint |
|---|---|
firstname |
|
lastname |
|
email |
|
language |
This can be either en (for English), nl (for Dutch), de (for German), es (for Spanish), fr (for French), ja (for Japanese), no (for Norwegian), pt-BR (for (Brazilian) Portugese). If not supplied, the default is en. |
role |
This can be either company_admin, editor, author or tech_admin. If not supplied, the default is editor. |
authentication_method |
This can be either password, googlge or microsoft. If not supplied, the default is password. |
dashboards |
This can be a comma separated list of dashboard names that the user should have access to, e.g. Main dashboard,Local dashboard. If not supplied the user hasn't got any access to any dashboards. |
The order of the columns doesn't matter. Here's an example of a valid CSV file:
firstname;lastname;email;role;dashboards;language;authentication_method
Mike;Smith;mike@smith.nl;company_admin;Dashboard 1, Dashboard 2;en;google
Moritz;Jensen;m.jensen@welter.de;editor;Main dashboard;de;microsoft
Marco;Mensen;m.mensen@kpn.nl;tech_admin;;nl;password
In a Pro subscription, you can configure Playr to allow single sign-on via Microsoft Entra ID. First, in your Microsoft Entra admin center do the following:
openid, email, profile, offline_access, User.ReadIn Playr, go to the list of users and click the Configure SSO button on top of the page. Add a new SSO connection with the following properties:
| Property | Explanation |
|---|---|
| Entra directory (tenant) ID | Copy the Directory (tenant) ID from the Microsoft app registration. |
| Login URL name | A identifying key that will be used in your company's own single sign-on URL. E.g. if you fill out acme here, your company's SSO URL path will become /sso/acme. |
| E-mail domains | Comma separated list of e-mail domain names that are allowed to log in. |
| App registration client ID | Copy the Application (client) ID from the Microsoft app registration. |
| App registration client secret | Copy the Value of the newly created client secret. |
| Give these to the administrator of the Entra directory | Copy the Reply URL from here to the Redirect URI of your app registration in Microsoft Entra. |
| Enabled | Flip this switch to enable or disable single sign-on through this connection. |
| Allow only login through single sign-on | Turn this option on to disallow any other login methods besides single sign-on. |
| Create accounts on first login | When turned on, when an unknown user logs in through this single sign-on connection, a user account is automatically created for him/her. |
| Role for new accounts | Select the default role that will be given to a user when his/her account is automatically created through a first single sign-on session. |
| Update roles on every login | When you want to manage user roles in Microsoft Entra, you can switch this on to have Playr synchronize the user's role with the SSO provider. |
| Role mapping | When managing the roles in Microsoft Entra, you need to specify the translation from the role names in Microsoft Entra to Playr role names. You do this in this text area with one role per line. The format is [Entra role name]=[Playr role name]. Use the following technical notations for the Playr role names: company_admin (company administrator), tech_admin (technical administrator), editor (editor) and author (author). |
When you choose to manually create the user accounts in Playr for each user that is allowed to login through SSO, be sure to select the corresponding login provider for each user. In case of Microsoft Entra, that is Microsoft.
Finally, you can now use the Login URL in the section Give these to the administrator of the Entra directory to have your users automatically login to Playr when they are logged into their Microsoft account.
As an administrator, you can put yourself in the shoes of a user with a "lower role". This is convenient if you need to view the system as he/she sees it when providing support. To to this, go to the user list and select the option Act as this user. This will switch you over to that user's role. Notice that the user icon in the top right corner of the dashboard is now colored orange. This is to indicate that you are now impersonating another user. To switch back, click on that user icon and select Back to myself.
Note that if you change content as another user, both your name and that of your "alter ego" will be logged in the change history.