Create or invite a user
Open Users and select Add. The detail form contains:
After creation, reopen the user to manage Permission groups and Groups. Membership is deliberately configured after the identity exists so every assignment targets a stable user ID.
Two membership types
- Permission groups provide reusable platform role sets, such as Component authoring or Automation operations.
- Groups provide membership for resource ACLs, such as access to a restricted finance Table or Storage folder.
Lifecycle actions
Disabling an account retains its API-key records, but admission rejects keys whose owner is inactive. Account deletion is the permanent credential-cleanup boundary.
Roles required to administer users
The UI hides or disables actions the current operator cannot perform. The API independently enforces authorization; hidden controls are not the security boundary.
Enterprise onboarding pattern
- Authenticate the user through the configured SSO/SAML or approved identity provider.
- Confirm the expected email and instance entitlement.
- Add the user to business Groups that map to restricted resources.
- Add the user to the smallest Permission group required for their job.
- Validate one representative read and write operation.
- Record the access owner and review date.
Incident and offboarding flow
For a suspected compromise, disable the account immediately, revoke unrecognized trusted devices, rotate exposed keys, and verify that HTTP and Realtime admission fail. Use delete only when the intended account lifecycle and retention policy require permanent removal. For ordinary offboarding, first identify Jobs, Schedules, Endpoints, or integrations that still use the person’s identity. Move unattended work to a Service Account before disabling access.Production checklist
- Use SSO/SAML for enterprise workforce identity.
- Never run unattended automation as a person.
- Assign platform roles through Permission groups.
- Assign restricted resources through Groups.
- Review administrators and trusted devices regularly.
- Disable first during an incident; investigate before permanent deletion.
- Verify access with the user’s actual role and ACL combination.