User profile and administration

This page explains how to sign in, manage your profile and, if you have permission, manage users. If you need access or cannot find an action, contact your OT Backup administrator.

Sign in

Use the sign-in option provided by your administrator. If your organization uses a separate sign-in provider, select its button. To use a local account instead, open Sign in with a local account and enter your username and password. With local-only sign-in, the form is shown directly.

Repeated incorrect passwords can temporarily lock a local account. Sign out before signing in as a different user. You may need to sign in again after inactivity, a restart or a password change.

Accept an invitation

For a new local account:

1. Open the setup link from your administrator. Keep this link private.
2. Check your account details, choose a password that meets the displayed requirements and confirm it.
3. Complete setup and sign in with your username and password.

The link works once and expires after 24 hours (one hour for SuperAdmin invitations). If it no longer works, ask your administrator for a new one. Invitations are not sent automatically.

Your profile

Open Profile to see your account details and role. With a local account, you can change your display name, email and password. To change your password, you need your current password and will need to sign in again afterwards.

If you sign in through your organization, change your details or password with that provider instead.

Authenticator and recovery codes

Your organization may require an authenticator app for local sign-in. Follow the prompts to scan the QR code or enter the setup key, then confirm the code from your app. You can also set up an authenticator from Profile when it is optional. After setting it up from Profile, select Continue and sign in again with your authenticator.

Save the recovery codes somewhere safe: they are shown only once. If you lose your authenticator, use a recovery code to sign in, then reset it from Profile using your password. If an authenticator is required, you will be prompted to set up a replacement at your next sign-in. You can also regenerate recovery codes or disable the authenticator from Profile when your organization's policy allows it; these actions require your password.

For organization-managed accounts, follow your provider's instructions for multi-factor authentication and recovery.

Reset a forgotten password

For a local account, ask an administrator for a recovery link. Open the link and choose a new password. Keep the link private. If your organization manages your account, reset your password through its sign-in provider instead.

A password reset keeps your authenticator and recovery codes. If you have lost both, ask an administrator to reset your authenticator too.

Manage users

Users with the right permissions can open Configuration → Users. The available actions depend on your permissions.

To invite a local user, select Add User, enter their details and role, then copy and share the setup link securely. Pending users cannot sign in until they complete setup. Organization-managed users are added when they successfully sign in, not through this invitation.

Use Edit or More actions beside a user to change access, reissue or revoke an invitation, or generate a recovery link. Deactivate accounts when access is no longer needed; inactive accounts can be restored. Permanent deletion of an inactive account or pending invitation cannot be undone. Deleting an organization-managed user here does not delete the account at its provider. Organization-managed profile details and roles are controlled by the provider.

Password and authenticator resets require separate ResetUserPassword and ResetUserAuthenticator permissions. An administrator cannot reset their own authenticator here; use Profile instead. Resetting an authenticator ends the user's sessions and invalidates outstanding password-reset links. If both resets are needed, reset the authenticator first, then generate a fresh recovery link.

Users are sign-in accounts. Configuration → Accounts stores credentials used for equipment, storage and other services; it does not create sign-in users.

For installation and initial administrator setup, see Authentication setup.