Skip to main content

Manage access and credentials for system users

Change a system user's workspaces and permissions, replace its client secret or delete it.

Before you begin

​

Open the system user

  1. In Funnel, go to your profile menu and select Subscription overview. In the Subscription Management navigation, select Users, then go to the System users tab.

    ​

  2. Select the system user you want to change.

​

Change workspace access

Add workspaces

  1. Under System user access, click Add System user to Workspaces.

    ​

  2. Select the workspaces and any roles available on your plan.

    ​

  3. Click Add.

​

Change permissions for one workspace

On Business and Enterprise plans, you can give a workspace different permissions from the others. The Business plan offers Viewer or Editor. The Enterprise plan offers more specific roles. The Starter plan has Editor access only.

​

  1. In Workspaces and roles, select the workspace's roles.

    ​

  2. In Edit Workspace roles, adjust the permissions.

    ​

  3. Click Apply.

​

Remove a workspace

A system user must keep at least one workspace. To remove all its access, delete the system user instead. Use the workspace's remove action, then confirm.

​

Replace the client secret

When you rotate the secret, the old one stops working right away. Any automation that still uses it can't request new tokens.

​

  1. Next to Client secret, click Rotate secret.

    ​

  2. Update the client secret in every automation that uses this system user before its next token request.

​

Delete the system user

Delete a system user when its automation no longer needs access. Any automation that uses it stops working. Go to the page's actions menu and select Delete System user.

​

What to expect

After you change access or replace the secret, test the automation with list_workspaces and check that the expected workspaces appear. Store the client secret and access tokens as securely as passwords. Use a separate system user for each automation. Then you can change access or replace the secret for one job without affecting the others.

Did this answer your question?