User Provider

The User Provider allows you to import and export user and user group data in a more straightforward manner than the Dynamicweb provider allows - this is achieved by abstracting a separation of users, addresses and groups at the provider level. 

User data has been abstracted into these three virtual tables:

  • AccessUserGroup contains user group data. A tree structure is defined by using the AccessGroupParentGroupName field. An empty node means the group is placed in the root of the tree, otherwise we match on AccessGroupGroupName
  • AccessUser contains data on individual users. Mapping to groups is done on the field AccessUserGroups which in your import file should be a comma separated list of group names
  • AccessUserAddress contains secondary addresses for users. Mapping to the individual user is done on the field AccessUserAddressUserID, which should be mapped to what you have selected as the key value (defaults to username). If for instance you have picked AccessUserExternalId as you key column, then this is the value you would use for column AccessUserAddressUserID.
  • AccessUserSecondaryRelation is used for users who can impersonate. Mapping to the individual users is done on the fields AccessUserSecondaryRelationUserID and AccessUserSecondaryRelationSecondaryUserID which should contain either the user Id, username, customer number, or email.

Below, you will find information on using the User Provider as a source provider (i.e. when exporting user data) and as a destination provider (i.e. when importing user data).

When using the User Provider as the source provider, you will have access to only a few settings (Figure 2.1). 

Figure 2.1 When used as a source provider, these are the settings available to you

You can either limit the export to include only:

  • Users created or edited since the last export
  • Users created or edited after a particular point in time

If none of these are checked, all users will be exported.

When used as a destination provider, you have access to much more extensive settings (Figure 3.1), which give you more control over the user data you import.

Figure 3.1 When used as a destination provider you have more options available to you

First of all you must specify a user key field, which is the field that will be used as the identifier for the record. It determines whether imported user data is created as a new user, or is used to update an existing user. If the e-mail address is unique in your dataset, you can select that column to be the primary key, and users that already exist with a given email in the database are updated instead of being added again.

Additionally, you can use the following options:​



Interacts with

Remove missing users

When this option is ON, non-system users not in the source data are removed


Generate passwords for users

Generates a password for imported users, provided that the user is new (not already in the Dynamicweb database) and the source data contains either no password or a NULL or empty string in the password column. If the user is being updated and has NULL or an empty string as a password, a password will be generated.


Encrypt passwords

Encrypts passwords present in the source data, and passwords generated for new users using the Generate passwords for users option

If Generate passwords for users is ON, they are also encrypted

Remove users group membership, if group is not in import

If Remove missing users is ON, and you import to a user group, users which are not in that user group will be removed

Only used in conjunction with Remove missing users – otherwise ignored

Remove missing groups

Removes user groups not present in the source data


Use email for username

When this option is ON, newly imported users will use the value from AccessUserEmail as the AccessUserUserName.


Existing users will not have their user names updated, and will be updated only if the username field is empty.


Discard duplicates

When ON, duplicate rows are ignored


You can use the destination group setting select a group to add the importes users to - check the Replace current group membership checkbox to force the imported users to only belong to the destination group(s) selected.

If you generate (and encrypt) passwords for new users on import, you can use the email configuration fields to set up automatic notifications to newly created users:

  • Provide an email subject,
  • Enter sender email
  • Select or create an email template to use - you can use both Razor and html based templates.

The User Provider uses the AccessUser table, but abstracts this data into AccessUser and AccessUserGroup.

For the virtual tables the following restrictions apply:

  • AccessUserGroup – Group names must be unique as the tree structure depends on name matching. Group names cannot contain commas as the group membership of a user is defined in a comma separated list
  • AccessUser – Each user must have a unique value in a field - we recommend using unique usernames (AccessUserUserName)

Additionally, you can access addresses in the AccessUserAddress table and impersonation rules in the AccessUserSecondaryRelation table.

The user provider also supports import and export of SystemFields used by e.g. the Avalare tax provider - they are located in the SystemFieldValue table, with metadata in the SystemField table.

Relations between virtual tables should be handled manually by mapping the fields described in the introduction.