Guide

Create and manage local tenant accounts

Give staff secure email-and-password access when the organization does not use SSO or a directory provider.

Tenant administrators6 min readUpdated July 17, 2026

Create an account

  1. Open People and roles under People & access.
  2. Select Create a local account and enter the person’s name and work email.
  3. Create a unique temporary password and choose the person’s initial role.
  4. Share the temporary password through an approved secure channel.
  5. The person signs in at the tenant portal and replaces the temporary password before opening the intranet.

Choose how the tenant authenticates staff

  • Email and password is the default and works immediately without an external identity provider.
  • Email/password or organization sign-in supports a controlled transition to SSO.
  • Organization sign-in only should be selected only after the connection is tested and active.

Suspend access safely

  1. Open the person’s Manage account section.
  2. Change Account status to Suspended or Disabled and save.
  3. The person’s existing remembered login is rejected the next time the portal checks the account.