--- title: "Manage Users" slug: "manage-users" tags: ["Security", "Manage Users"] updated: 2026-11-05T06:44:56Z published: 2026-11-05T06:44:56Z canonical: "docs.biztalk360.com/manage-users" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.biztalk360.com/llms.txt > Use this file to discover all available pages before exploring further. # Manage Users BizTalk360 allows administrators to set up fine-grained authorization both at the applications level and system level. Administrators can set up access rights for users to different sections depending on the user requirements. It is a valuable feature that ensures robust access management and security through fine-grained authorization. This provides flexible user management and allows administrators to have precise control over access, based on the specific needs of various users or user groups. This functionality proves beneficial for business units who wants to safeguard sensitive and critical data maintained within their environment. ## **Type of Users** User Access Policy allows users with administrator access to create, modify, and delete user access policies. BizTalk360 provides two levels of authorization at the Applications Level and the System Level. Administrators can set up the access rights for users to various modules or sections based on the business requirements. In BizTalk360, there are three distinct user types: 1. **Super User:** This user type has unrestricted access to perform all tasks and has access to all the modules within the BizTalk360 environment. 2. **Normal User:** With this user type, administrators can configure fine-grained permissions, customizing their access according to their business requirements. 3. **NT Group User:** Similar to Normal Users, NT Group Users also possess fine-grained permission, that is being customized by administrators based on their business needs. The user can be either an individual Windows NT User or a Windows NT Group. To grant common access to all users within a Windows group, you can create a User Access Policy for the group within BizTalk360. Simply provide the group's name and activate the 'Is NT group' option. To access the User Access Policies, follow these steps: 1. Log in to the application as a Super User. 2. Choose an environment from the environmental panel. 3. Navigate to Settings in the left menu bar. 4. Select Team Management from the left menu bar. 5. Click on the Manage Users option. 6. Create a Normal User or edit an existing one. ## **Add New User** The Add New User page in BizTalk360 allows Super Users to add individual users or user groups and control their access to the BizTalk360 environment. On this page, the administrator specifies the User or Group Name, Domain Name, and selects the target Environment to which the user should have access. Administrators can optionally mark the entry as an NT Group to add multiple users at once or designate the user as a Super User to grant full access across all BizTalk360 features. Once the user details are provided, the administrator can proceed to configure feature-level permissions to ensure secure and role-based access management. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/image-1793782254718.png) ## **User Permissions - Applications** BizTalk360 offers user access policies that enable application-level security, allowing for selective access within the BizTalk Environment. This grants flexibility to customize the permissions for individual users or teams, specifying which applications they can access. Leveraging this feature ensures a more secure configuration of the product. To access BizTalk Applications, there are several methods available: - Granting Access by Application - Granting Access to Application Groups - Wild Card Search for Groups In the User Permission - Applications screen, only one rule can be applied at a time. Once configured, this rule governs the user's access to BizTalk Applications as specified. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/image-1709895088309.png) #### **Grant Access by Application** Users with Administrators access can toggle this option to select either a single application, multiple applications, or all available applications to grant access. Users will then be able to access the applications provided access by the administrators. By clicking the select all option, users will be granted permission to access the applications that are created within the BizTalk environment in future as well. An additional view option is available to list all applications permitted for users, facilitating easier management and oversight of access permissions. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/View%20Access(1).gif) ## **Grant Access by Application Groups** Users with administrator access are able to grant one user access to a group of applications. The user's business environment determines how many applications there are. It could be quite difficult for the user selecting from all of the applications available. BizTalk360 provides an option to create application groups in order to get rid of this. By enabling the Grant Access by Application Groups toggle, users can grant access to a single or multiple application groups. The user will be able to access all of the applications within the selected application group. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/ApplicationGroup.gif) ## **Wildcard Search** The Wildcard search feature offers four options for users to select from. Once a user chooses the desired option and provides a search value, this rule is configured to grant access to all applications that match the wildcard criteria. Additionally, the user will automatically gain access to any newly added applications that meet the wildcard criteria. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/wildcard.gif) ### **User Permission Features** The **User Permission – Features** page allows Super Users to configure access using two options: **User Profile Template** and **Custom Selection**. User Profile Templates provide predefined permission settings, while Custom Selection allows Super Users to configure individual feature permissions across Administration, Monitoring, Analytics, and General. In Custom Selection, feature checkboxes are initially disabled. Selecting a section enables its corresponding feature checkboxes, allowing Super Users to grant the required permissions. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/image-1793703048793.png) For features such as Dashboards and SQL Query, BizTalk360 provides Full and Partial selection indicators based on the permissions configured for the respective features. This helps Super Users identify whether all or only some of the available permissions have been granted. At the higher-level feature categories, such as (BizTalk Services, Advanced Services Manage infrastructure and Azure services), selecting the main checkbox grants only View access to the user. If the user needs to perform operations within these features, the Super User must explicitly grant the corresponding Manage permissions. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/image-1793703676199.png) Once the user is created, the Super User can click the View (Eye) icon against the respective user in Team Management to view the feature permissions and application access assigned to that user. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/image-1793703271798.png) ## **Switch User Types** Users also have the ability to switch between user types. For example, a Normal User can be converted into a Super User, and vice versa, allowing for flexible adjustment of user privileges. ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/image-1790340905249.png) Note The logged-in user will not be able to edit/delete their own profile. ## Identify and Update admin user for BizTalk360 Scenarios where the admin user performs the BizTalk360 installation, when the user installed who is not part of team there is an issue occurs while launching the application as shown below. When the another user logs in to the BizTalk360 server and attempts to access the BizTalk360 portal, they may encounter the following error: ![](https://cdn.document360.io/253f6006-3994-42d0-98cd-fdc637f51791/Images/Documentation/image-EMEG3BLF.png) This occurs when the logged-in user has not been added to BizTalk360 or does not have access to any of the configured BizTalk environments. ### Resolution To access BizTalk360, the logged-in Windows user must be **added as a user in BizTalk360** and assigned the required environment permissions. If the BizTalk360 service account credentials are available, you can launch the browser using the BizTalk360 service account, access the portal, and add or update the user account in BizTalk360. Alternatively, if the service account credentials are unknown, you can identify the BizTalk360 administrator account from the BizTalk360 database. The administrator user details can be found in the following table: `b360_admin_AdminUserOrRole` Once you identify the administrator account, use the appropriate administrator credentials to log in to BizTalk360 and add the required user with the necessary environment permissions. After adding the user, log in with the user's own account and verify that the required BizTalk environments are accessible. Refer to this article to [change the service account credentials](/v12/docs/service-accounts-credentials-in-biztalk360).