Skip to main content

User Management

Manage users, teams, roles, and permissions with multi-factor authentication support for secure team collaboration.

Understanding User Roles​

RolePermissionsBest For
AdminFull platform access, manage users, billing, infrastructure, policies, governancePlatform administrators, IT managers, DevOps leads
DeveloperDeploy apps, create workflows, manage resources, access data sources, deploy modelsSoftware engineers, DevOps engineers, data scientists, ML engineers
App (Viewer)Read-only access to apps, workflows, dashboards, reports - no modification rightsStakeholders, business users, auditors, managers

How to Invite Users​

Step 1: Navigate to User Management​

  • Click Settings in the main navigation
  • Select Users from the settings menu
  • Click Invite User button

Step 2: Enter User Information​

Required Information:

  • Email Address: User's email for login and notifications
  • Full Name: Display name in UI
  • Role: Select from Admin, Developer, Data Scientist, or Viewer
  • Teams: Optional - assign to existing teams
  • Send Invitation Email: Automatically send setup instructions

Step 3: Set Password Policy (First-Time Setup)​

Users receive an invitation email with a secure link to set their password. Password requirements:

  • Minimum 8 characters
  • At least one uppercase letter
  • At least one lowercase letter
  • At least one number
  • At least one special character

How to Create and Manage Teams​

Creating a Team​

  1. Go to Settings → Teams
  2. Click Create Team
  3. Enter team name and description
  4. Add team members from existing users
  5. Set team lead (optional) with additional permissions
  6. Configure team-level resource quotas (optional):
    • Max CPU across all team resources
    • Max memory allocation
    • Max storage per team
    • Max number of apps, workflows, workspaces
  7. Click Create Team

Sharing Resources with Teams​

Once teams are created, you can share resources:

Sharing Applications​

  • Open app details page
  • Click Share button
  • Select teams or individual users
  • Set permissions: View only or Edit

Sharing Projects​

  • Open project settings
  • Go to Access Control tab
  • Add teams with View or Edit rights
  • All project workspaces inherit permissions

Sharing Workflows​

  • Open workflow in builder
  • Click Settings icon
  • Add collaborators or teams
  • Viewers can see execution logs only

Sharing Data Sources​

  • Edit data source
  • Go to Permissions section
  • Choose Private, All Users, or Specific Users/Teams
  • Credentials remain encrypted

How to Enable Multi-Factor Authentication​

For Individual Users​

  1. Click your profile icon in top-right corner
  2. Select Account Settings
  3. Go to Security tab
  4. Click Enable MFA
  5. Scan QR code with authenticator app (Google Authenticator, Authy, 1Password, etc.)
  6. Enter 6-digit verification code from app
  7. Save backup codes in secure location
  8. Click Activate MFA

Enforcing MFA for All Users (Admin Only)​

  1. Go to Settings → Security Policies
  2. Enable Require MFA for All Users toggle
  3. Set grace period (e.g., 7 days for users to set up MFA)
  4. Optionally require MFA for specific roles only (e.g., Admin, Developer)
  5. Click Save Policy
  6. All users will be prompted to enable MFA on next login
Lost Access?

If a user loses their MFA device, admins can reset MFA from the Users page. The user will need to set up MFA again on next login.

Managing User Permissions​

Changing User Roles​

  1. Go to Settings → Users
  2. Click on user name
  3. Select new role from dropdown
  4. Click Update Role
  5. Changes take effect immediately

Deactivating Users​

  1. Find user in Users list
  2. Click Actions → Deactivate
  3. User loses all access immediately
  4. Resources owned by user remain intact
  5. Can reactivate later without data loss

Activity Monitoring​

  • View user login history and last active time
  • Track resource creation and modifications
  • Monitor failed login attempts
  • Export activity logs for compliance

Access Reviews​

  • Quarterly access review reminders
  • Review users with admin privileges
  • Identify inactive users for deactivation
  • Audit team memberships and permissions
Security Best Practice

Enable MFA for all admin users, conduct quarterly access reviews, and deactivate users within 24 hours of departure.