.. _blocklist:

**************************************
List of User Sessions. Blocklist
**************************************


.. rubric:: In this chapter:

.. contents::
   :local:

FindFace Multi allows you to monitor user sessions and learn associated data, such as the connected device UUID, type of user interface (mobile app or web interface), IP address, last ping time, and so on.

If necessary, you can add a device to the blocklist without deactivating the user account. The device block may come in handy in various situations. For example, if you want users to access the system only from their workplaces. Use the blocklist functionality to take your system safety to the next level.


Grant Permissions to Work with Sessions
==========================================

A user's access to the list of sessions depends on the granted :ref:`permissions <create-role>`:

* Administrator: can view and close sessions of all users
* User with the ``all_own_sessions`` permissions: can view/close all sessions initiated with their username
* User without the ``all_own_sessions`` permissions: can only view/close their current session


View User Sessions
=================================

To view the list of user sessions, navigate to :guilabel:`Preferences` -> :guilabel:`Sessions`. 

     |sessions_en|

     .. |sessions_en| image:: /_static/sessions_en.png
        :scale: 60%

     .. |sessions_ru| image:: /_static/sessions_ru.png
        :scale: 60%

Each session record provides the following data:

* device UUID
* username
* device information
* type of the user interface (mobile/web)
* IP address
* status (online, offline, blocked)
* last ping time

Use the filter panel to the right to set up the search conditions.

To close a session, select it in the list and click :guilabel:`Close`.

     |sessions_close_en|

     .. |sessions_close_en| image:: /_static/sessions_close_en.png
        :scale: 60%

     .. |sessions_close_ru| image:: /_static/sessions_close_ru.png
        :scale: 60%



Block Device
================================

The list of blocked devices is available on the :guilabel:`Blocklist Records` tab (:guilabel:`Preferences`). 

     |blocklist_en|

     .. |blocklist_en| image:: /_static/blocklist_en.png
        :scale: 60%

     .. |blocklist_ru| image:: /_static/blocklist_ru.png
        :scale: 60%

You can add a device to the blocklist on both the :guilabel:`Sessions` and :guilabel:`Blocklist Records` tabs. Blocking a device leads to the user's automatic log-out.

To block a device on the :guilabel:`Sessions` tab, do the following:

#. Select the relevant session record(s).
#. Click :guilabel:`Block`. 

     |block_sessions_en|

     .. |block_sessions_en| image:: /_static/block_sessions_en.png
        :scale: 60%

     .. |block_sessions_ru| image:: /_static/block_sessions_ru.png
        :scale: 60%

#. Specify the reason for the device to be blocked (mandatory) and the block expiry date (optional). If no date is specified, the block will be permanent. 
#. Click :guilabel:`Save`.

     |block_en|

     .. |block_en| image:: /_static/block_en.png
        :scale: 60%

     .. |block_ru| image:: /_static/block_ru.png
        :scale: 60%

Blocking a device on the :guilabel:`Blocklist Records` tab is similar:

     |block_blocklist_en|

     .. |block_blocklist_en| image:: /_static/block_blocklist_en.png
        :scale: 60%

     .. |block_blocklist_ru| image:: /_static/block_blocklist_ru.png
        :scale: 60%

#. Click :guilabel:`+`. 
#. Manually enter the device UUID.
#. Specify the reason and the block expiry date.
#. Click :guilabel:`Save`.