IRIS User Access Definitions

  

User Status Name  

Definition / Criteria  

Location(s)  

Active  

  • User has accepted invite and signed User Confidentiality & Data Security Agreement  
  • User has logged in within 120 days   

Production, Admin  

Deactivated  

  • User has not logged in within 120 days  
  • User belongs only to a deactivated organization  
  • User belongs only to a deactivated community  
  • User has been manually deactivated by Admin or System Manager  

Production, Admin  

Active: Locked  

  • An active user unsuccessfully attempts to sign in ≥ 5 times  

Admin 

Deactivated: Locked  

  • A deactivated user unsuccessfully attempts to sign in ≥ 5 times  

Admin  

Training  

  • User only has training site access 

Admin  

Training Deactivated  

  • User only has training site access and has not logged in within 120 days 

Admin  


IRIS Organization Access Definitions  


Org Status Name  Definition / Criteria  Location(s)  

Active  

For Organization Activation 

  •  RDU Contact has signed the Responsible Data Use Agreement
  • As it currently stands, an org can be active at creation with zero active users (this includes users added without having signed their UCDSA, as well as no users added at all) 

After Org Activation + Active Users:

  •  At least 1 active user exists within the org


Production*, Admin  

Pending**  

  • Responsible Data Use Contact has not yet signed the Responsible Data Use Agreement 

Production*, Admin  

Suspended  

 

After Org Activation + Active Users:

  • 0 active users exist within the org  
  • 0 active users exist within the org 

Production*, Admin  

Deactivated  

  • Org belongs to a deactivated community
  • Org is manually deactivated by Admin / System Manager

Production*, Admin  


*These categories do not exist as filters in Production. Users can only filter by Data Agreement Status (Active, Pending, Declined)


**Pending organizations can also contain the following Data Agreement Statuses: Pending, Declined 



Deleting IRIS Users - Should NEVER happen

User accounts should NEVER be deleted, only deactivated. If a user's account is accidentally deleted, the system recognizes the user's email on the back end and won't let you create an account for them, despite no account for them existing. It is possible to recover these deleted emails by working with the development team (i.e., Brand New Box) but should only be done so at the discretion of the IRIS Management team. 








Need help? IRIS Support | Last updated: November 7, 2025