Managing Users

Users in CapaOne are the people associated with managed devices — the endpoint users, not CapaOne administrators. You find them under Management → Users.

Knowing who is assigned to which device matters for accountability, targeting, and enrollment workflows. A device with an assigned user is easier to identify and contact when something needs attention.

Users vs. administrators

This section is about endpoint users — the people who use managed devices. CapaOne administrator accounts (the people who manage CapaOne itself) are handled separately under Account → Users & Organization.

Creating users manually

1. Go to Management → Users and click New.
2. Enter the user’s name and email address.
3. Link the user to one or more endpoints.

Manual user creation is suitable for small environments or for adding a specific user that is not covered by directory sync.

Syncing users from a directory

For larger environments, creating users manually does not scale. CapaOne can sync users automatically from Microsoft Entra ID (formerly Azure AD) via the Integrations page.

Synced users show up in the Users list with their directory source indicated. When a user is updated or removed in the directory, CapaOne reflects the change after the next sync.

See Integrate CapaOne with Entra ID for setup steps.

Linking users to endpoints

A user can be linked to one or more endpoints. The endpoint count next to each user in the list shows how many devices are currently associated with them. Click the count to see which endpoints.

On the endpoint detail page, the assigned user is visible and can be changed. This is useful when a device changes hands — update the user assignment to keep records accurate.

Good to know

• Local users are created directly in CapaOne. Synced users come from an external directory. Both types appear in the same list, differentiated by a badge.
• Removing a user does not remove their associated endpoints from CapaOne — the devices remain managed, but the user association is cleared.
• Users are per-organization — each organization in CapaOne has its own user list.