Published Date: May 1, 2026 | Last Updated: May 13, 2026
Overview
The Users page is the central view for managing individual Users in Tello IAM. It displays all Users imported from connected integrations, their current access state, and their status. From this page, the Administrator can review User details, assign or remove Role Templates, add direct access grants, resolve access issues, and mute Users that do not need to be managed.
Navigate to Users in the left navigation to access the Users page.
For instructions on creating a new User manually, see How to Create a User in Tello IAM.
The Users page
Each row in the Users list represents one User. The following columns are displayed:
| Column | Description |
|---|---|
| User | The User's display name and email address, imported from the connected IDP |
| Job Title | The User's job title, imported from the HR system or IDP |
| Department | The organizational department the User belongs to, imported from the HR system or IDP |
| Role Templates | The Role Templates currently assigned to the User |
| Access | Icons representing the integrations the User is currently provisioned in |
| Status | The User's current sync state: Synced, Inactive, or Issue |
User status values
| Status | Meaning |
|---|---|
Synced |
The User record is complete and accurate. No action is required. |
Inactive |
The User exists in the connected system but is not active. Inactive Users are displayed for visibility but are not provisioned. |
Issue |
Tello IAM has detected a problem with this User's record that requires Administrator review. Select the User to investigate. |
Review User details
Select any User to open the User Details panel. The panel displays the User's name, email, title, department, and current status. The Access Grants tab shows all access the User currently holds, organized into 2 sections:
- Role Templates — access assigned through a Role Template. Each entry shows the template name and the integrations it covers.
- Direct Integrations — access assigned directly to the User in a specific application, outside of any Role Template.
The Properties tab displays additional User attributes imported from the IDP and HR system.
Assign a Role Template
- Select the User to open the User Details panel.
- In the Access Grants tab, select Add Role Template under the Role Templates section.
- Select the template to assign from the list.
- Confirm the assignment. Tello IAM applies the template permissions immediately.
Important: Assigning a Role Template fully overrides the User's previously detected permissions in every application the template covers. This is not a merge — it is a replacement. Any access the User held that is not included in the assigned template is removed. Verify the template is complete before assigning it.
Remove a Role Template
- Select the User to open the User Details panel.
- In the Access Grants tab, locate the template under Role Templates.
- Select the remove option and confirm. The access that template was providing is removed immediately.
Add direct access
Direct access assigns permissions to a User in a specific application without creating or modifying a Role Template. This is appropriate for one-off access needs for a single User. For access changes that should apply to multiple Users, update the relevant Role Template instead.
- Select the User to open the User Details panel.
- Select + Add Access in the top right of the panel.
- In the Integrations tab, select the integration to assign access in. Integrations already assigned appear greyed out.
- In the Selected Access panel, configure the permissions for the selected integration.
- Select Save. The integration appears under Direct Integrations in the User's Access Grants tab.
Resolve an access issue
A User displaying a status of Issue requires review. Issues indicate either a permission drift event or a sync error.
Drift
Drift occurs when a permission changes in a connected application outside of Tello IAM. When drift is detected, the issue detail identifies the specific discrepancy. To resolve:
- Select the User to open the User Details panel.
- In the Access Grants tab, select the flagged integration under Integrations.
- Select Resolve →.
- Choose one of the following:
- Use values from Tello IAM — updates the connected application to match the Tello IAM configuration. Use when the change was unauthorized or incorrect.
- Use values from [source application] — updates Tello IAM to match the connected application. Use when the change was intentional.
- Select Resolve. Tello IAM applies the resolution and clears the issue.
For more information on Drift, see our article Monitoring: Drift Detection.
Sync errors
A sync error indicates a problem during data import for this User — for example, a field mismatch between the IDP and HR system, or a record that exists in one system but not the other. The issue detail describes the specific error. Resolve the underlying data discrepancy in the source system, then navigate to Integrations and select Sync Now. The User's status updates once the sync completes successfully.
Mute a User
Muting a User hides the record and suppresses all notifications related to it. This is useful for non-person objects that Entra ID or other IDPs import as Users — Shared Mailboxes, Distribution Lists, service accounts, and similar objects that do not need to be managed in Tello IAM.
- Select the User to open the User Details panel.
- Select Mute.
Muted Users can be unmuted at any time from the same panel.
Related articles
- How to Create a User in Tello IAM — manually create a new User and provision them across integrations
- Role Template Management — create, edit, and manage Role Templates
- Monitoring: Access Overview — live permission matrix across all Users
- Getting Started Part 3: Verifying & Managing User Permissions — guided walkthrough for first-time setup
Seasoft Security Solutions LLC | TelloIAM