The Employees screen is where all your employees and other users are listed. You can see when a user first/last logged in, which computer they logged in from, their status (i.e. active, idle, locked, etc.), if they are currently being monitored, or if they have two-factor (2FA) authentication enabled.

1. If you have selected one or more employees (by clicking the check mark in front of their names), you will see an Action menu. From the action menu you can lock, unlock, enable/disable monitoring, etc. See the Employee Action Menu section for more information.

2. Click the IMPORT button to import employees from a CSV file. See the Importing Employees section for more information.

3. Click the NEW EMPLOYEE button to add an employee. See the Adding a New Employee section for more information.

4. You can filter the report by employee states (e.g., Monitored, Locked Out, Deleted, Unlicensed, Access to Dashboard, etc.), roles, departments and LDAP groups (if Active Directory is enabled).

5. You can search for computers using the Search field.

6. You can export the report in PDF/CSV formats by using the PDF or CSV icon. You can access the report settings by clicking the Settings (Gear) icon. You can refresh the report by clicking the Refresh icon.

7. If Active Directory is enabled, you will see a small + icon. Click it to filter the report by LDAP attribute and value.

Here’s a description of the report columns:

1. Click the EMPLOYEES menu to access its screen.

1. Click the NEW EMPLOYEE button near the top of the screen. A pop-up window will open where you can edit the employee’s profile details such as their personal information, account security, monitoring options, etc. See the Entering / Editing Employee Profiles section to learn how to enter these details for a new employee.

At bottom of the New employee (if you are adding a new employee), Edit info (if you are editing an existing employee) or My profile (if you are editing your info) window, you will see a few buttons:

If you are adding a new employee:

1. Click the ADD USER & SEND INVITATION button to add the new employee and send them an invitation email. The email will look like this:

2. It will contain the links to download the Teramind Revealed Agent and their login credentials.

3. Click the ADD USER button to just add the user without sending an invitation. Note that, if you don’t send them an invitation and don’t assign them a password, the user won’t be able to login.

If you are editing an existing employee or your own profile:

1. Click the RESEND INVITATION button to resend the employee the invitation email. The email will look like this:

2. It will contain the links to download the Teramind Revealed Agent and their login credentials. Note that, the Resend Invitation button will only be available if the employee has never logged into the web dashboard before.

3. Click the APPLY CHANGES button to save any changes you have made to the profile.

If you are adding a new employee, a New Employee window will pop up where you will be able to enter the employee’s profile information.

To edit the profile of an existing employee:

1. Click the name of an employee from the List of Employees screen. You will be taken to the Employee’s screen.

2. Click the EDIT INFO button on an Employee’s screen.

3. An Edit info window will pop up where you will be able to edit the employee’s profile information.

See the sections below for an explanation of each tab on the profile window.

Under the Personal Details section of the PERSONAL INFO tab, enter the employee’s personal details such as names, email, and phone number.

You can also upload a photo for the employee’s profile by clicking the photo area. Ideally, the image should be at least 128x128 pixel, in PNG or JPG format.

Under the Business Details section, you can assign the employee a department, position, etc. If you enter the Rate, you will be able to see the user’s expense on various widgets and reports (e.g., the Productivity report, Employee Cost, etc.).

The LDAP attributes section is only shown if you have set up an Active Directory integration. The attributes are read-only. You cannot edit their values.

On this tab, you can specify the user’s DEFAULT TASK (applicable if the employee is using a Hidden Agent. Check out the Tasks section to learn how to create tasks for your employees).

You can also set their ACCESS LEVEL. There are four types of access levels you can choose from:

Check out this article to learn more about account access levels.

On this tab, you can also enable/disable other account security settings, such as:

If enabled for an admin, the admin will have access to all the features under their access level.

Note that, if this option is enabled, then you will be able to toggle the User can clock in and out using Web interface setting (see below).

The RBAC (stands for Role Based Access Control) tab allows you to turn a regular user (Employee access level) into a privileged user by assigning a Role access control policy to them. To do so:

1. Select a Role policy from the SELECT ROLE BASED POLICY TO GRANT USER ACCESS drop-down list. Check out the Creating a Role (RBAC) Policy section to learn how to create a Role policy.

2. Click the SELECT TARGETS button, the role will be added.

3. Click the GRANT ACCESS TO field and select users, computers, departments, Active Directory groups, shared lists, etc. from the list of objects. You can delete an object by clicking the X button next to it.

4. You can delete a role by clicking the X button located at the top-right corner of the role’s panel.

A logged in employee can enable/disable 2-Factor Authentication from their own profile (by clicking their name near the top-right corner of the Dashboard and selecting My Profile:

There are two ways to set up the 2FA authentication. Via an authentication app (e.g., Google Authenticator) or via the email. If 2FA is currently disabled, the employee can enable it by clicking the ENABLE button or vice versa. For step-by-step instructions on how an employee can configure their own 2FA, check out this article on our Knowledge Base.

On this tab, you can specify which monitoring profile to use for this employee. Or, you can manually change any of the monitoring settings. If you manually change the settings, a “Custom profile” will be automatically created and assigned to the user.

For more information about monitoring profiles and monitoring settings, check out the Monitoring Settings section.

Productivity profiles allow you to classify a user’s app or website activities as productive or unproductive. On the Productivity Profile tab, you can see which productivity profile is currently being assigned to the employee. However, you cannot edit the profile from this tab. To learn more about productivity profiles and how to create/edit them, check out the Productivity Profiles section of the User Guide.

You can quickly add multiple employees by importing them.

1. Click the IMPORT button near the top of the Employees screen. You will be taken to the Import employee screen.

2. Click the UPLOAD CSV FILE button to upload a CSV file containing employee information.

3. If you want, you can click the DOWNLOAD SAMPLE CSV button to download a sample CSV file that shows you how the CSV file containing a list of employees should be formatted for importing into Teramind.

4. A table at the lower part of the screen will show what CSV fields Teramind can import, their expected values, and which fields are mandatory.

5. Turn on the Invite users by email setting to send out invitation emails to install the Teramind Revealed Agent to the newly added employees. When you start the import process, you will be asked to confirm:

This means, the server will ignore the PASSWORD column in the CSV file and generate a random password. The user will get an invitation email to log in (same as manually sending an invite):

If you do not use the Invite users by email option, then the PASSWORD column of the CSV file will be used. You will have to give the employee the password somehow. Otherwise, they will not be able to log in.

In both cases, the user will be asked to change their password when they log in for the first time.

6. After the import is completed, you will see the list of employees being added:

You can perform various actions such as lock/unlock a user, delete/restore their profile, or enable/disable monitoring for them.

1. Click the check mark in front of the employee names to select employees.

2. From the top-left corner of the screen, select the action you want to perform. Here are the actions you can perform:

1. Click the name of an employee from the Employee column. You will be taken to the Employee’s page where you can see their detailed reports such as, Activity Log (similar to the Web Pages & Applications Report), Session Log, Time Worked, Alert Log, etc.:

2. You can also edit the employee’s profile, toggle monitoring, delete the employee or view the assigned policies/rules policies from this this screen.

1. Click the ACTIVE POLICIES button from the Employee’s page. A pop-up window will open where you can view all the active policies and rules applied to the user:

Please note that:

1. Click the EDIT INFO button from the Employee’s page. A pop-up window will open where you can edit their profile information. Check out the Entering / Editing Employee Profiles section to learn how to edit the profile.

2. Click the small, Red Trash Can icon to delete the employee. You can also delete/restore an employee from the Employee Action Menu. Note that, when you delete a user, they are not permanently deleted, just hidden from the employee list and all monitoring reports. If you are on a Cloud deployment, deleting a user will also free up a license.