Settings

Current user administration and quality-SLA configuration, plus clearly labelled reference/planned settings.

​

System Configuration

User administration and feature-gated quality-SLA targets are server-backed. Organization-profile fields and the permissions matrix are read-only/reference surfaces. Server authorization is authoritative — a static reference matrix must not be treated as proof of access control.

​

User Management

Admins can invite users, manage account status, adjust quality roles, and create password reset links. Access control is part of GMP system control — users should have the least access needed for their role, and inactive accounts should not remain enabled. Review the user list after staffing changes and before audits.

​

Imports and Configuration

Import tools and configuration controls help populate controlled records while retaining validation feedback. Bulk changes can create widespread data quality issues if source files are incomplete or mapped incorrectly — check import summaries and validation errors before relying on imported data for production or inspection evidence.

​

Validate and import CSV

Settings → Imports is administrator-only and requires onboarding imports to be enabled. The Users import option additionally requires bulk user import. An unavailable tab or option is not activated by this release.

1. Select the record type and download its Template. Preserve the required headers and prepare no more than 400 data records.
2. Paste the CSV. For documents, use draft status or leave status empty; approved and in-review documents are not accepted as imported states.
3. Select Validate only. Review the returned physical CSV row numbers and each row’s diagnostics.
4. Correct invalid rows, or proceed only if your procedure permits importing the valid subset.
5. Select Import CSV, then check the committed counts, invalid rows, and created-record links.

​

Validation is recorded, not committed import work

Each successful Validate only request saves one validation batch and one audit event, even when some rows are invalid. Repeating validation saves another record. The displayed would be inserted and would be updated counts are predictions. No imported documents, deviations, CAPAs, users, invitations, or email jobs are created by validation. The saved report records zero committed inserts and updates, plus separate predicted counts. Its invitation option records your selection only; it does not mean invitations were sent. Recent activity may label the event dry_run. Validation can fail if its audit record cannot be saved, including an audit lock or write failure. Do not treat that failure as a saved validation result.

​

Partial success and file rejection

A structurally valid CSV can contain invalid records. Those rows are reported while valid records can be imported; an invalid document status does not abort the other valid drafts. A malformed file, an invalid header set, or a file over the limit is refused instead. These are different outcomes. A transactional failure during actual import is not partial validation success: the failed transaction rolls back its writes. Check the returned result before retrying to avoid re-importing records that already committed. Use the validation result’s parsed rows for the authoritative count. The pre-submit row count shown while you paste is a display estimate of nonblank CSV records, not counting the header row; blank lines are not counted, and no count is shown while a quoted field is unfinished. Row numbers in the validation result still refer to the file’s physical lines.

​

User import choices

Existing active users are not updated unless Update existing active users is selected. Rows that cannot be applied are reported. You cannot alter your own account through this import. A live user import requires a reason of at least 10 characters. Send invitations after the import commits applies to the actual user import only. A queued invitation is not evidence of delivery. Validation never sends it.

​

Invitations and account status

Administrators can withdraw an outstanding invitation or deactivate an account through the available user controls. Withdrawal invalidates the pending invitation; a previously issued link must not be used afterward. Deactivation also handles outstanding invitation state. Review the action’s result, rather than treating an old email link as current access. The optional invitation-status column requires invitation visibility to be enabled. This release does not enable it for every account and does not change the sign-in model.

​

Sites and licences

Where multi-site administration is enabled, creating a first-time site or licence does not require a reason for changing an existing record. Later controlled changes, such as updates, archiving, or unlinking, retain their reason requirements. Site setup is not a production-system integration.

​

Document categories

When document categories is enabled, administrators can add categories or rename them in Settings. Creating a category is a first-time action; renaming it requires a reason. The current controls do not delete or archive categories. See Document categories for assignment and controlled-change limits. These optional controls remain unavailable where their feature is off.