User Management
Adding PGAS employees, inviting external users, suspending accounts, and resetting passwords.
Administrators only
User Management is available to users with an administrator role. Others do not see it in the sidebar and are sent back to the home page if they open its address.
Open User Management from the Admin group in the main sidebar
(/admin/users): "Manage PGAS employee and external user accounts, invites,
and access."
Passwords and two-factor methods are not stored in EOMIS. They belong to each
person's PGAS account at auth.pgas.ph (see Signing In).
This page controls who has an EOMIS account, their role, and whether they can
use it.
The users table
The table lists every account with its Name, Username, Email, Source (PGAS for employees, otherwise the external user's organization), Role, and Status. The search box filters across these columns. The table shows 20 users per page.
| Status | Meaning |
|---|---|
| Invited | The account was created by Add Employee or Invite External, or was reactivated. It can be used. |
| Active | The account can be used. People whose account was created on their first sign-in show this. |
| Suspended | Access is blocked; the account can be reactivated. |
| Archived | Access is blocked and the account is retired; it can be reactivated. |
An Invited badge does not mean the person has not joined yet. It stays after they set their password and start using EOMIS, so do not use it to check who has accepted.
Each row has a ⋮ menu with the actions that apply to it, described below.
Adding a PGAS employee
Search the PMIS employee directory by name, EID, or office, and pick the employee. People who already have an account are marked Has account and cannot be picked.
Check the Username. It is suggested for you; you can change only the number at the end. A check mark shows when it is available.
Click Create Account. An invitation is emailed to the employee so they can set their password (see Passwords).
Inviting an external user
Use Invite External for contractors, suppliers, or partner-agency reviewers who are not in the PMIS directory.
Enter their Email, First Name, Last Name, and Organization; optionally a Position. Choose a Role and check the suggested Username.
Click Send Invite. They set their own password when they accept the invitation.
Tip
If you enter an @pgas.ph address, the dialog suggests adding the person as a
PGAS employee instead. You can still send the invite if that is what you want.
For an Invited account, the row menu offers Resend invitation and Revoke invitation. Revoking makes the link already sent stop working immediately; the person would need a new invitation.
Suspending, archiving, and reactivating
- Suspend blocks an active user from EOMIS immediately. You are asked to confirm.
- Archive is offered for a suspended account, to retire it.
- Reactivate restores access to a suspended or archived account.
You cannot suspend or archive your own account.
Resetting a password
Use this when an account may be compromised. It is offered for every account except archived ones.
Open the user's row menu and click Send password reset. The Trigger Password Reset dialog opens.
What actually happens:
- The user's current password stops working immediately.
- Their active PGAS sessions are revoked, so they are signed out everywhere.
- No email is sent and no new password is issued. The user regains access by clicking Forgot password? on the PGAS sign-in page and choosing a new password. Tell them to do so. See Passwords.
The dialog's wording still describes the old EOMIS reset: an optional email address field, a reset link being emailed, and the user being made to change their password at next sign-in. None of that happens any more, and anything typed into the email field is ignored. Follow the description above.
If the sessions could not be revoked, the result says so; the password is still invalidated, but check with the user and try again. A reset fails for an account that is not yet linked to a PGAS account ("This user has no Authentik identity linked yet and cannot be reset this way.").
Bulk password resets
Tick the checkboxes of several rows (archived accounts cannot be selected). A "N user(s) selected" bar appears with Send Password Resets and Clear Selection. The bulk dialog runs the same reset for every selected user and then shows how many succeeded and failed, with details per user. This is useful after an office-wide security incident.
Changing an existing user's role is not done on this page.