Personal Accounts
Personal Accounts are human user accounts in Qualytics. Every person who logs into the platform has a Personal Account with an assigned role that determines their level of access. Unlike Service Users which are synthetic users for automation, Personal Accounts represent real users who interact with the Qualytics web interface.
What Are Personal Accounts?
Personal Accounts are individual user accounts created when a person is added to the Qualytics platform — either through direct login, SSO provisioning, or Directory Sync.
Key Characteristics
- Interactive login: Personal Accounts can log into the Qualytics web interface
- Role-based access: Each user is assigned a role (Admin, Manager, or Member) that controls platform-level permissions
- Team membership: Users are assigned to teams that control datastore-level access
- Self-service tokens: Users can generate their own Personal Access Tokens for API access
- Public team: All users are automatically part of the default Public team
Note
Permissions are assigned to Teams rather than directly to users. Users inherit the permissions of the teams to which they are assigned.
Personal Accounts vs Service Users
Understanding the difference helps you manage access appropriately across the platform.
| Feature | Personal Account | Service User |
|---|---|---|
| Represents | A human user | A synthetic user for automation |
| Login | Can log into the web interface | Cannot log in — API-only access |
| Created by | SSO/login or Directory Sync | Administrators only |
| Token type | Personal Access Tokens (self-service) | Service Tokens (admin-managed) |
| Best for | Interactive use, development, testing | Pipelines, integrations, shared automation |
| Lifecycle | Tied to the individual person | Independent of any individual user |
Deep Dive
Understand how Personal Accounts work — user roles, team-based access, and the permission model.
-
How It Works
Provisioning, authentication, team-based access, and permission inheritance.
-
User Roles
Detailed capability tables for Admin, Manager, and Member roles.
-
Permissions
Roles required to view, edit, deactivate, and reactivate users.
-
Best Practices
Least privilege, role assignment, team management, and token hygiene.
Managing
Add, view, edit, deactivate, and reactivate users.
-
Add User
How users are provisioned through SSO and Directory Sync.
-
View Users
Browse, search, filter, and sort the users list.
-
Edit User
Update a user's role or team assignments.
-
Deactivate User
Revoke a user's access while retaining their account.
-
Reactivate User
Restore a previously deactivated user.