Drupal 8 - Seeing who has access to your site

Overview

As the unit administrator of a site, you might want to know who has access to your website, and what roles and permissions they have. 

For example, you may be wondering who has the ability to edit and remove pages on your site. 

This document will show you how to view user accounts and roles, but you won't be able to add use accounts or change permissions; it's a security risk. For that, you'll need to put in a ticket to the web team on the Franklin Helpdesk. 

Table of Contents

Steps

Take a look at the black admin toolbar on your site.

Fine the "shortcuts" link. Click it.

The white admin toolbar will change. 

Look for the "View user accounts" link and click it. 

You'll see everyone who has an account on your website. The table includes their myID, Full name, status, and roles, how long they have ad an account and when they last logged in. I have intentionally blurred out the usernames and full names.

The list only shows 30 accounts at a time, so you may need to use the pager at the bottom to browse all the accounts.

More on searching and filtering accounts in a moment. 

Explanation of Roles and Permissions 

If you scroll down to the bottom, you'll notice a collection of text called "Explanation of Roles and Permissions." This will help you understand what the roles mean and who has what power on your site. 

Filtering and searching users

You can filter by user roles. You can also search for specific users using all or part of a name, myID or email address.

Filtering by Role

All the way to the right is a drop-down that allows you to filter by the Roles described in the screenshot above. This is particularly helpful if you want to know who on your site has the ability to add, edit and delete content.

Select a role, then hit the filter button.

In the example below, I want to see who can add, edit, and delete content on my site. So I've selected the "web committee" role and hit the filter button. 

You can also see who has the ability to edit their own personnel page by filtering the personnel role.

Et cetera. 

You can reset the filters at any time by hitting the "reset" button.

So how can you look for a specific user?

Searching for a particular user

You can search for a specific user by their myID (username), their full name or email address. 

The fields support "fuzzy" searching, which means you can use all or just part of a name and get results. 

I've illustrated that with each of the examples below by typing in just part of a name, then hitting filter. 

On username, I just put part of my account name, then hit "filter," and it was still able to locate an account.

This can be particularly useful if you don't have a username memorized.

We recently added Full names to accounts. So if you know someone's name, that may be the easiest field to search with.

As with username above, you can enter any part of a name, even if it isn't a complete name. "Laur" gave me everyone named "Lauren,"  "Lauryn," "Laura" and "Laurel," whether those names were first, last, or middle.

You can also search by email address, but this is often the same as the myID. 

Once again, you can reset the filters at any time by hitting the "reset" button.

How to add or remove user accounts, or change permissions

If you notice that someone's account needs to be upgraded, downgraded, or blocked from the site, please put in a ticket to the web team on the Franklin Helpdesk. We'll be happy to help you with that.