Toggling access for third-party users

This article applies to organization admins in the PI2 platform.

The Third Party Users page lets you manage existing third-party users and their access permissions.

What permissions do third-party users have?

There are 2 toggleable permissions for TPUs, each of which can be enabled/disabled on a per-user basis:

Software access: When enabled, the third-party user is granted the highest access level to all PI products your organization is subscribed to. They can do everything a product admin can do, plus the majority of what an organization admin can do.
Cognitive admin access: This is a separate permission from general TPU software access that, when enabled, grants the ability to send Cognitive Assessments, set Cognitive Targets, view cognitive data, and manage cognitive access. (Learn more about cognitive admins.)

How to enable/disable TPU software and cog admin access

Log in to the PI software.
Click the gear icon () in the top-right of the navigation bar.
Select "Third Party Users" on the left-hand side.
Search for the name or email address of the person whose access you’d like to enable/disable.
Select/deselect the checkbox under the "Software Access" header.
(Optional) Select/deselect the checkbox under the "Cognitive Admin Access" header.
(Optional) Repeat for additional users.
Click "Save Changes."

Note: You cannot manually add or remove third-party users at this time. To do so, please submit a support ticket.

Important: To grant cognitive admin access to a TPU, you must also grant them software access. If software access isn't toggled on, the cognitive admin checkbox will be greyed out and you will see the following hover text:

TPU access overview

Here's a breakdown of the key differences between an organization admin and third-party user.

Note: Third-party users have access to all PI products and features your organization is currently subscribed to, with very few exceptions. Unless otherwise stated in this article, assume TPUs have access to "X" feature.

PI Administration

	Org admin	Third-party user
Access to "Employee Directory"	✅	✅
Send assessments to employees	✅	✅
Invite employees into the software	✅	✅
Upload an organization data file	✅	✅
Access to "Employee Access Settings"	✅	✅
Configure organization settings	✅	✅
Manage billing details	✅	✅
Modify employee access levels	✅	✅
Remove employee software access	✅	✅
Archive employees	✅	✅
Edit all jobs, teams, and surveys	✅	✅
Promote/demote organization admins	✅	✅
Transfer ownership of jobs, teams, and surveys	✅	⛔
Enable/disable third-party user access	✅	⛔
Anonymize employees	✅	⛔

PI Hire

	Org admin	Third-party user
Be promoted to cognitive admin*	✅	⛔**
Be granted cognitive access	✅	⛔**

*Cognitive admins can view and send cognitive data. They can also grant cognitive access to any employee in Hire.

**By default, TPUs do not have cognitive admin access. This is a separate, toggleable permission that can be enabled/disabled at any time.

PI Perform

	Org admin	Third-party user
Access admin console	✅	✅
View analytics	✅	✅
View manager dashboard*	⛔	✅
Enable manager assistants*	⛔	✅
Kick off 360 feedback for another employee*	⛔	✅
Submit manager reviews*	⛔	✅

*These actions and tools are intended for managers and must be toggled on for all employees (org admins included). By default, TPUs have manager access.

FAQs

General questions

What is a third-party user?

Third-party user is a special user type intended for users outside of your organization (such as your PI consultant). When enabled, third-party users are granted the highest access level to all PI products your organization is subscribed to.

Can I customize third-party access by PI product?

Third-party access cannot be customized. When managing third-party users, you can toggle their access either completely on or completely off.

Exception: The sole exception is cognitive admin access. This is a separate permission from general TPU software access that, when enabled, grants the ability to send Cognitive Assessments, set Cognitive Targets, view cognitive data, and manage cognitive access.

How do I add/remove a third-party user?

You cannot manually add or remove third-party users at this time. To do so, please submit a support ticket.

Can third-party users revoke access to specific jobs/teams?

By default, third-party users have "edit" access to all jobs and teams. As a result, a TPU can revoke an employee's access to a particular job or team.

Note: Only limited users can have their access revoked from a job or team.

Cognitive admin access

I want to grant "X" TPU cognitive access. How do I that?

Enable "cognitive admin access" for this TPU. Doing so will automatically grant them cognitive access, along with all other cognitive admin permissions.