Manage Roles and Users in Momentus Connect

Momentus Connect has four standard roles: two customer-facing roles and two internal Momentus roles, as well as a custom role for customers. Each role builds on the permissions of the previous one, with the Super User having the broadest access.

Capability	User	Custom Role	Customer Admin	Support User	Super User
View & Request Apps	✔	✔	✔	✔	✔
Configure Apps		selected apps only	✔	✔	✔
Approve Apps				✔	✔
Manage Users				✔	✔
Assign Roles				✔	✔
Create & Manage Custom Roles				✔	✔
Assign Users to Tenants				✔	✔
Create Customers					✔
Link Tenants to Customers					✔

Notes and Upcoming Changes:

• An account's first Admin must be assigned by Momentus. They can then update other users to admin or create and assign custom roles.
• The Customer Admin role is not automatically inherited from Enterprise or Elite. Manual assignment is required for now for the first Admin.
• The Super User role can only be granted by the Platform Team.

In this article:

• Navigate to the Customer Dashboard in Connect
• Roles
  • Customer Roles
  • Internal Momentus Roles
• Manage Custom Roles
• Manage Users
  • Edit a User
  • Add a User
  • Deactivate a User

Navigate to the Customer Dashboard in Connect

Roles and users are managed on the customer dashboard by internal Momentus users. To navigate there:

1. Navigate to Momentus Connect. As a support user, you will land on the Customers Page.
2. Search for and select the customer you are managing users for. The Customer Dashboard displays with the Users tab selected. From here you can manage users for the customer.

Roles

Customer Roles

Customer roles are the roles visible and assigned to end customers using Momentus Connect.

• User: This is the default role automatically assigned to every new user who accesses Momentus Connect.
  • Capabilities:
    • Browse and navigate the Marketplace
    • Request apps
    • Receive notifications about their own app requests
  • Limitations:
    • Cannot configure apps
    • Cannot manage other users or roles
• Custom Roles: Custom roles sit between User and Customer Admin: they grant Customer Admin rights, but for specific apps rather than all apps; they can also grant admin access to specific Workflow Builder apps. A user who has a custom role assigned has User access to all apps and Customer Admin access to the apps selected on the role.
• Customer Admin: The Customer Admin role includes everything the User role can do, plus the ability to configure apps. The Configure button within an app is only enabled for users assigned this role.
  • The first Customer Admin user must be assigned by internal Momentus users (Support User or Super User). That admin can then handle all user needs for their org.

Internal Momentus Roles

Users with a Internal Momentus are taken directly to the Customers page when they log in, where they choose which customer to work with. This gives them cross-customer visibility that customer roles do not have.

• Support User: The Support User is an internal Momentus role responsible for managing app approvals and users across customers. Capabilities are: 
  • Everything a User and Customer Admin can do
  • Cross-customer visibility via the Select Customer page
  • Approve or decline app requests
  • Create new users or assign the Customer Admin role to existing users
  • Assign roles to users and create and assign custom roles
  • Assign users to tenants
• Super User: The Super User can do everything a Support User can do, with the following additional capabilities:
  • Create new customers
  • Resolve orphan tenants by mapping them to Salesforce accounts and linking them to a customer 

The Super User role can only be granted by the Platform Team. It cannot be self-assigned or assigned by a Support User.

Add a User

While users are created automatically, they can also be added manually by both Support Users and Super Users.

1. On the User tab, click Add User. The Add User drawer/slider opens.
2. Add all user information:
   • First and last name
   • Email
   • Role: Select User or Customer Admin
   • Tenants: Select the tenants the user should have access to
3. Click Save.

Deactivate a User

Users in Connect can be deactivated (as well as reactivated). On the User tab, locate the user and click Deactivate. Click Yes to confirm that you want to deactivate the user.

Why deactivate a user?

Users can be deactivated if their Admin doesn't want them to access Connect for some reason. 

There's no need to deactivate the Connect user if a user is deactivated in Enterprise or Elite; authentication is through that application, so if they can't get into those apps, they can't get to Connect. Once Connect integrates with Entra, users deactivated in the Enterprise/Elite will be deactivated in Connect as well, just to keep things tidy.