# Users

User account fields, membership status, and personal preferences.

Source: https://support.toolingmetrics.com/en/admin/reference/users/
Updated: 2026-10-29

A **User** is an individual account that logs in to Tooling Metrics. Each user belongs to one or more organizations and is assigned to one or more permission groups within each organization.

## Fields

| Field | Description |
|---|---|
| **Email** | Login email address. Unique across the entire platform. Cannot be changed after the account is created. |
| **First Name** | User's first name. Displayed in the UI and on printed documents. Maximum 24 characters. |
| **Last Name** | User's last name. Maximum 24 characters. |
| **Avatar** | Profile picture. PNG or JPEG, smaller than 1 MB. |
| **Language** | Preferred language: `English`, `日本語`, or `Tiếng Việt`. Overrides the organization's default language for this user. |
| **Time Zone** | User's local time zone. Overrides the organization's time zone for display of timestamps in this user's session. |
| **Unit System** | Preferred measurement system: `Metric` or `Imperial`. Applies to the machining calculator and cutting data display. |

## Membership status

Each user has a status within the organization:

| Status | Description |
|---|---|
| **Invited** | Invitation sent; the user has not yet set a password and accepted. |
| **Active** | User has accepted the invitation (or been approved) and can log in. |
| **Requested** | User signed up on an already-registered email domain and requested access to this organization; awaiting admin approval. |
| **Suspended** | Access has been revoked. The user is removed from all of the organization's groups and cannot log in to it. All data they previously created is preserved. |

## Permission groups

Each user is assigned to one or more **Groups** within the organization. Every newly invited user is placed in the organization's default `org_user` group automatically; admins can add them to additional groups afterward. The user's effective permission level per record type is the highest level found across all of their groups. See [Groups](https://support.toolingmetrics.com/en/admin/reference/groups/) for permission levels.

A user with no groups at all has no access to any record type, but this is not a normal state — invite and suspend actions manage group membership automatically.

## Login history

Tooling Metrics records sign-in activity per user:

| Field | Description |
|---|---|
| **Sign-in Count** | Total number of successful logins. |
| **Current Sign-in** | Timestamp and IP address of the current session. |
| **Last Sign-in** | Timestamp and IP address of the previous session. |

## API tokens

Each user can generate personal API tokens under **Account → Settings → API Token**. Tokens begin with `tm_usr_` and authenticate API requests on behalf of that user. A token grants the same permissions as the user's groups. A user can hold multiple tokens at once and revoke each independently.
