Toggling access for third-party users

This article applies to organization admins in the PI2 platform.

The Third Party Users page lets you manage existing third-party users and their access permissions.

What permissions do third-party users have?

Third-party users are granted the highest access level to all PI products your organization is subscribed to. They can do everything a product admin can do, plus the majority of what an organization admin can do.

Here's a breakdown of the key differences between an organization admin and third-party user.

Note: Third-party users have access to all PI products and features your organization is currently subscribed to, with very few exceptions. Unless otherwise stated in this article, assume TPUs have access to "X" feature.

PI Administration

	Org admin	Third-party user
Access to "Employee Directory"	✅	✅
Send assessments to employees	✅	✅
Invite employees into the software	✅	✅
Upload an organization data file	✅	✅
Access to "Employee Access Settings"	✅	✅
Configure organization settings	✅	✅
Manage billing details	✅	✅
Modify employee access levels	✅	✅
Remove employee software access	✅	✅
Archive employees	✅	✅
Edit all jobs, teams, and surveys	✅	✅
Transfer ownership of jobs, teams, and surveys	✅	✅
Promote/demote organization admins	✅	✅
Enable/disable third-party user access	✅	⛔
Anonymize employees	✅	⛔

PI Hire

	Org admin	Third-party user
Be promoted to cognitive admin*	✅	⛔
Be granted cognitive access	✅	⛔

*Cognitive admins can view and send cognitive data. They can also grant cognitive access to any employee in Hire.

PI Perform

	Org admin	Third-party user
Access admin console	✅	✅
View analytics	✅	✅
View manager dashboard*	⛔	✅
Enable manager assistants*	⛔	✅
Kick off 360 feedback for another employee*	⛔	✅
Submit manager reviews*	⛔	✅

*These actions and tools are intended for managers and must be toggled on for all employees (org admins included). By default, TPUs have manager access.

How to enable/disable third-party access

Log in to the PI software.
Click the gear icon () in the top-right of the navigation bar.
Select Third Party Users on the left-hand side.
Search for the name or email address of the person whose access you’d like to enable/disable.
Select/deselect the checkbox under the Access header.
(Optional) Repeat for additional users.
Click Save changes.

Note: You cannot manually add or remove third-party users at this time. To do so, please submit a support ticket.

FAQs

What is a third-party user?

Third-party user is a special user type intended for users outside of your organization (such as your PI consultant). When enabled, third-party users are granted the highest access level to all PI products your organization is subscribed to.

Can I customize third-party access by PI product?

Third-party access cannot be customized. When managing third-party users, you can toggle their access either completely on or completely off.

How do I add/remove a third-party user?

You cannot manually add or remove third-party users at this time. To do so, please submit a support ticket.

Can third-party users revoke access to specific jobs/teams?

By default, third-party users have "edit" access to all jobs and teams. As a result, a TPU can revoke an employee's access to a particular job or team.

Note: Only limited users can have their access revoked from a job or team.