Users

This section contains a list of users and bots on a server.

Can I View the Number of Licenses Currently Used by Users?

You can see how many users are registered: export the user list to CSV. There is no dedicated tool that shows purchased licenses. Check the number of purchased licenses with your eXpress account manager (more details).

Searching for Users

In the search field on / , you can search for users by HUID, name, email, domain, and position as specified in their corporate account.

On and , you can search for users by name and phone number. Search is based on the data that the user specified during initial registration or later in the profile settings in eXpress.

Creating Users

You can manually create a new user on the corporate server by clicking the corresponding button or set up the automatic synchronization.

How to Bulk Create Users Manually?

Use the Load from CSV button.

Migrating From Manual to Synced Accounts?

If you recently set up synchronization, delete the old manual accounts with duplicate emails. Otherwise, they will conflict with the new synchronized accounts.

What Authentication Methods Are Available for Manually Created Users?

Such a user will only be able to log in via email. For other sign-in methods, when synchronizing with a corporate directory (for example, Active Directory), create users in the directory.

Can User Synchronization and Manual Creation Be Used Simultaneously?

Yes. For example, you can synchronize an organization's employees from a directory and create external contractors manually. This only works with Email authentication — both manually created and synced users will log in using email codes.

How to Connect Users Not Listed in the Corporate Directory?

To connect external users (partners, contractors) who are not in the organization's directory to the corporate server:

1. Create profiles for external users in the Users section manually.
2. In the “Registration Settings” section, switch the authentication method to Email.

This way, both external users and those synchronized from the directory will log into their corporate account via an email code.

Is an Email Required for Syncing a User with AD/OpenID?

When authenticating with an AD login and password (the NTLM method) or with the OpenID method, the user won't need to enter an email, so syncing this field is optional. However, if simplified authentication suggests or email-based login confirmation (the Email method) are used, also sync the email field in user profiles.

How to Properly Pass Credentials to Users?

When you provide corporate information, tell users:

• To log into the app with their phone number if they have previously used it.
• A phone number can be added later, but only if there is no account already linked to it.

This way, the user will keep the chat history if they have already used a phone number. The chat history will also be saved when changing the login or switching to another server.

Managing User Profiles

Action	Manually created User	Synchronized User
Editing	Click the pencil button on a user in the list to edit their data.	To modify a synced user's data, edit them in the directory and run synchronization.
Blocking	You cannot block a user through the admin panel.	Blocking via AD/OpenID is supported.
Deleting	To delete a user: Initiate and confirm their logout Click the trash button	To remove a synchronized user, log the user out, delete their synchronization group in AD or their role in OpenID, and start synchronization. The profile will disappear from the list. ⚠️ For OpenID accounts to be deleted automatically after logout, enable the corresponding setting in the OpenID section in advance.

Which Users Can Be Edited or Deleted Manually in the Admin Panel?

You can only modify or delete users who were created manually or via self-registration with an email mask. Before deleting, log the user out.

How to Change User Login Properly?

Refer to this guide.

I Blocked a User in the Directory, but They Did Not Leave the Server. Why?

Blocking in the corporate directory does not unlink the user from the corporate server. To unlink the user, confirm the user's logout request or configure automatic logout.

Exporting the User List

The Download as .CSV button downloads the user list in CSV format. Later, you can import this list into a group chat or channel to add all users from it at once. To filter the exported list, use the search function. After clicking the button, choose the user types to export:

User type	Description
cts_user	Registered active corporate users.
unregistered	Unregistered inactive users.
botx	Bots and Smart Apps.

User Profile

Clicking on a user opens their profile information:

Field	Description
HUID	The user’s unique identifier. ⚠️ Before the user's first login, the CTS admin panel shows a temporary HUID. Enter the corporate account's HUID into external systems only after the employee's first login to the app.
Company details, position, etc.	CTS eCTS Filled manually by the administrator or synchronized automatically.
RTS ID/ETS ID/CTS ID	The registration server ID. To learn the server address, find this ID in the “Servers” section.
Type of the profile	botx ( CTS / eCTS , ETS , RTS ) — bot (Smart App) account cts_user ( CTS / eCTS ) — active corporate account external_client ( CTS / eCTS ) — external client app account guest ( CTS / eCTS , and on RTS ) — guest account unregistered ( ETS , RTS ) — inactive account user ( ETS , RTS ) — personal account not linked to a corporate server
Avatar source	Introduced in version 3.67. custom — user uploaded an avatar in the client sync — avatar synchronized from AD/OpenID
Source	admin — user created in the administrator panel email — user created via email self-registration ad/openid — user created during synchronization with the corresponding system
Registration type	default — phone number registration cts_only — registration without a phone number
AD groups	CTS eCTS Displayed for users synchronized from Active Directory.
OpenID roles	CTS eCTS Displayed for users synchronized from OpenID. Based on these roles, users are added to role model groups.
Personnel number, Business unit, Personnel category, Gender, Birthday	Filled in during synchronization from OpenID if the attributes are specified in the Attribute Mapping section.
Dates of account creation, update, or deletion	Updated upon server login or synchronization

Profile Buttons

At the top, there are buttons to manage the user or view additional information.

Button	Description
Activations	Active and completed sessions: Each session is identified by UDID Contains device information, software versions, and locks information Displays permissions (Device Meta): permissions.microphone — microphone access permissions.notifications — browser/OS notifications pushes — in-app notifications permissions.contacts — contact access permissions.storage — storage access Available actions for activations: Clean chats/Clean contacts — forcibly clears the cache, then data is loaded from the server Clean all — clears chats/contacts and ends the session Delete ( RTS / ETS only) — clears data, closes the session, and deletes the activation record
Blocks	CTS eCTS List of account blocks in Active Directory and their reasons.
Keys	User's public encryption keys: Corporate users have a cts key for message encryption. It comes paired with the rts key; A public user has an rts key for message encryption. If a user registered in an earlier version of the application, the rts key is paired with the cts key; ed25519 - session key for message signing. There may be multiple keys, distinguished by version and date/time.
Chats	RTS CTS eCTS List of all user's chats.
Recovering keys in chats	Fixes encryption key issues in chats (details). “Error restoring keys in chats. Reason: already_in_progress” — the user's key recovery is already queued. Wait approximately 30 minutes.
Clean cache	Clears local chat/contact cache on all user devices.
Clean all	Deletes the cache and forcibly returns the user to the sign-in screen on all their devices.
Logout	CTS eCTS Sends a request to log out of the corporate server. The request must be confirmed in the “Logout Requests” section.

What Happens When Users Get New Keys?

A corporate / user gets new cts and rts keys, and a public user gets a new rts key. This happens:

• Resetting the personal encryption password.
• After account deletion and re-registration.

When a user signs in again on a device, a new ed25519 signing key is created.

When signing in after logout, keys are forcibly synchronized between servers.