Onboard Your Team
Your multi-user ELN3 is running and you’re logged in as Admin. This guide covers creating user accounts, assigning roles, and distributing the connection configuration to your team.
User Roles
| Role | Permissions |
|---|---|
| Admin | Full system access. Manage users, equipment, templates, licensing, and settings. Access all projects. |
| Super | Access all projects. View audit logs. Manage equipment and action types. Cannot manage users. |
| PowerUser | Create and manage own projects. View audit logs. Share projects with other users. |
| User | Create and manage own projects and items. Standard notebook usage. |
| Guest | Read-only access to shared projects. Cannot create or modify data. |
Creating Users One by One
- Open Users > Users Editor
- Click Add
- Fill in: First Name, Last Name, Login, Email, and Role
- Set an initial password
- Click Save
Note: The Users menu is only visible to Admin users.
Bulk Import via CSV
For larger teams, import users from a CSV file:
- Open Users > Users Editor, click Load CSV
- Prepare a CSV file in one of two formats:
- 4 columns:
FirstName,LastName,Email,Role— login is auto-generated (first initial + last name, e.g.,jsmith) - 5 columns:
Username,FirstName,LastName,Email,Role— uses the provided username
- 4 columns:
- The first row can be a header (auto-detected). Both comma and semicolon delimiters work.
- Each imported user gets a randomly generated 8-character password
- After import, a credentials dialog shows all logins and passwords — save or print this list
Valid roles: Admin, Super, PowerUser, User, Guest. If omitted or unrecognized, defaults to User.
Setting Project Permissions
By default, users see only their own projects. To share a project:
| Level | Description |
|---|---|
| None | Project is invisible to the user |
| ReadOnly | Can view but not modify |
| ReadWrite | Full collaboration — add, edit, and delete items |
Admin and Super users can see all projects regardless of permissions.
Distribute Connection Settings
Instead of configuring each workstation manually, export an encrypted configuration file:
Export the configuration
- Log in as Admin on your configured workstation
- Go to Database > Export Configuration…
- Review the connection summary (server, database, WebDAV URL)
- Enter an encryption password (minimum 6 characters) and confirm
- Click Export and save the
.elnconfigfile
Distribute to team members
- Send the
.elnconfigfile to users (email, shared folder, or USB) - Communicate the encryption password through a separate channel (e.g., in person or secure messaging)
- Users install ELN3, then in the Connection Wizard select Managed installation
- Browse to the
.elnconfigfile, enter the password, click Load - Create their user account or log in with the credentials you assigned
What’s inside the file: MySQL server address, port, database name, credentials, storage path, and WebDAV settings — encrypted with AES-256-CBC (PBKDF2-SHA256, 100k iterations).
Updating connection settings
If the server configuration changes (e.g., server migration):
- Export a new
.elnconfigfile from any configured Admin workstation - Distribute to users
- Users open Database > Reconfigure Connection… to load the new file
Managing Users Over Time
Archive inactive users
Users who leave the team can be archived instead of deleted:
- Open Users > Users Editor
- Select the user, click Archive
- Archived users are blocked from logging in but their data and audit history are preserved
- To restore: enable Users > Show Archived Users, select the user, click Unarchive
Reset a password
In the Users Editor, select the user and click Reset Password to set a new password.
What’s Next
Your team is set up. For day-to-day usage, users can access the built-in help within ELN3 via Help > Contents.