• Genie URL: https://gcsurge-docs.nxgen.cloud/gcsurge/docs/management/user-management-invitations

The Users module is where Super Admins manage the full lifecycle of platform access for their organization. This includes: Inviting new users. Covers: What User Management Does, Navigating the Users Module, Inviting a New User.

What User Management Does

• Inviting new users.
• Assigning and updating roles.
• Monitoring invitation status.
• Removing users.

Effective user management is both an operational and a security responsibility.

Roles in GC Surge

You assign a role to every user when you invite them, and a Super Admin can change it later from the Edit User dialog. Two roles are available:

• Super Admin — full access: site creation, user management, NOVA99x configuration, and subscription/billing.
• Operator — scoped to operational work only: Video Search, ZenMode, and the Home Dashboard. An Operator cannot open My Subscription, see invoices or per-camera cost figures, — those are Super Admin-only. NOVA99x is always active and cannot be disabled by any user. Operators do see the Home Dashboard KPI cards (alarms, time saved, capacity headroom) because those are operationally relevant.

By least privilege, default new users to Operator — it covers everyone who handles alarms — and reserve Super Admin for people who genuinely need administrative control. If unsure, invite as Operator and promote later.

Navigating the Users Module

1. Open the Users section from the sidebar navigation.
2. The main view displays a table of all users associated with your account, including: Avatar, name, and email address.GCXONE Role.Actions: Edit User and Remove User buttons appear directly on each row.

Above the user table you have three controls for working with large rosters:

Inviting a New User

1. Navigate to the Users module.
2. Click + Invite New User.
3. Fill in the invitation form: First name and last name (both required).Email address.Country code and phone number (optional).Most accounts use email-based invitation and recovery, so phone is nice-to-have. It matters in two cases: if the user is also an on-site contact whose Site Key is sent over WhatsApp, or if you want SMS as a password-reset fallback. Desk-bound operators can usually skip it.Role — select from the dropdown. Default to Operator unless the person needs administrative control; you can promote to Super Admin later.Profile photo (optional) — purely cosmetic and skippable. New users can upload their own on first sign-in; only set it here when pre-populating the directory for a large team. The uploader recommends a square image, at least 200×200px.
4. Click Send Invitation. A User invited successfully confirmation appears at the top of the screen and the user count in the User List increases immediately.

What the invited user receives.

1. Check your inbox for an email from noreply@nxgen.io containing a link to set your password.
2. Open the email and click Confirm.
3. The Reset your password page opens. Set a password that meets these requirements:8+ charactersUppercase letter (A–Z)Lowercase letter (a–z)Number (0–9)Symbol (e.g. !@#$%^&*)
4. Confirm your password. The screen shows: “You’re redirected directly to the onboarding wizard”
5. After setting the password, you are redirected directly to a 3-step onboarding wizard: Welcome (review your Operator role and select your language), Your Profile (confirm your display name and optionally add a photo), and All Set (confirms sites and alerts are routed to your queue). Click Enter Surge to land on the Operator Dashboard.

You will also receive an account verification email.

Cancel discards the invite form without sending anything — no email goes out, no user is created, and nothing is saved as a draft. If you cancel by mistake, re-open Invite New User and re-fill. CSV-based bulk invitations are on the roadmap; today each user is invited individually.

Editing a User

1. Locate the user in the Users table.
2. Click the Actions menu (…) next to their name.
3. Select Edit User.
4. Choose the new role from the GCSurge Role dropdown (under Account Settings).
5. Click Update User. The user’s permissions update immediately.

What you can change. Editable fields: first name, last name, phone number, GC Surge role, profile photo. The email address is locked — it’s the user’s account identity. To change an email you invite a new user with the new address, transfer their role and entity assignments, then deactivate the old account once the new one is verified. Audit history doesn’t carry over, by design, since audit entries point to the account that performed them.

How a role change applies. After you click Update User, the user is not signed out; on their next page navigation or login their sidebar updates — a downgrade hides modules they no longer have, an upgrade reveals new ones. The change is recorded in the audit trail with who made it, when, and a before/after diff of the fields. There’s no notification email by default, so let the user know out-of-band if the change affects their workflow.

Removing a User

Removing a user is a soft delete: it deactivates the account rather than erasing it. Access is revoked immediately — all active sessions end and any in-progress alarms the user was handling are released back to the queue — but their historical actions remain in the audit trail under their name and account ID for traceability. A Super Admin can reactivate them later from the Users list, restoring their role and entity assignments. Use this when a team member leaves or changes responsibilities. For a hard delete (GDPR data removal), contact GC Surge support.

1. Open the Users module from the sidebar.
2. Locate the user in the table.
3. Click the Remove User button (trash icon) in the Actions column of their row. Access is revoked immediately.

Best Practices

• Remove access promptly when a team member leaves or changes responsibilities.
• Invitations expire after 72 hours. If a recipient did not receive the email, re-invite them rather than waiting for the link to expire.
• Limit the number of Super Admin accounts — roughly two or three for a small monitoring station, five or six for a larger one. Every Super Admin account is a potential attack surface: if one is compromised, the attacker gains every administrative power on the platform. Operators who only need event access should be invited as Operator, not promoted for convenience. Audit the Super Admin list at least quarterly and downgrade or deactivate anyone who no longer needs it.
• Use business email addresses. Personal email addresses make account recovery harder and create risk if a user leaves but retains access to their personal email.

Account Settings

• Genie URL: https://gcsurge-docs.nxgen.cloud/gcsurge/docs/management/account-settings

Settings is the personal configuration area in GC Surge. Click Settings in the bottom-left sidebar to open the modal. It contains four sections: Personal Information, Close alarm flow tags, Configure shifts, and Report schedule. To switch between sections, click the section name in the left panel.

Personal Information

Available to all users. Displays your account details. Only USER NAME is editable — all other fields are read-only.

• USER NAME — your display name shown to other users and in leaderboards. Click the pencil icon to edit. Changes take effect immediately.
• EMAIL — the email address linked to your account. Read-only. To change it, contact your Super Admin.
• ROLE — your assigned role (Super Admin or Operator). Read-only. Role changes must be made by a Super Admin from the Users screen.
• USER ID — your unique system identifier. Read-only. Referenced in audit trail entries.

Close Alarm Flow Tags

Closure tags are the labels operators select when closing an alarm in ZenMode. Every closed alarm requires a tag — this data feeds into analytics and reporting.

Add a tag

1. Click the Tag name field and type the tag name.
2. Press Enter. The tag appears as a pill below the input.
3. Repeat for each additional tag.
4. Click Update to save.

Remove a tag

1. Click the × icon on the tag pill.
2. Click Update to save.

Configure Shifts

Super Admin only. Define the shift time windows for your monitoring station. Shifts drive the Focus Zone default in ZenMode and set the reference period for performance metrics.

Time zone — select the time zone that applies to all shift start and end times.

Add a shift

• Shift name — a short label (e.g. A, B, C or Morning, Evening, Night).
• Start time / End time — the time window for this shift.
• Description (optional) — a note visible to admins only.
• Use as default — marks this shift as the default for new operators when no shift is specified at invitation.

Click Add Shift. The shift appears immediately in the Configured shifts table.

Report Schedule

Super Admin only. Choose when the CPO/APT report email should be sent for this account.

• Hourly — a report is sent every hour.
• Daily — a report is sent once per day.
• Weekly — a report is sent once per week.
• Monthly — a report is sent once per month.

Time zone — select the time zone used to calculate when each reporting period starts and ends. Time of day — select the hour when the report email is sent. Day of week — for weekly reports. Day of month — for monthly reports (1–31).

Click Save Schedule to apply.