# Users

The User Directory allows for the invitation of additional interactive users and their roles to the organization. Only organization owners and admins can invite additional users. It is recommended to have at least two users assigned the Owner role in case either user needs to leave or be removed from the organization.

{% hint style="info" %}
Only an organization Owner may invite other users as Owners. Organization Admins are allowed to invite other users and set their roles to Admins, but not Owners.
{% endhint %}

The Users page is located in the Admin section of the left-hand navigation bar under Access Control:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FpeUduvmVFZCaUHAmeRnO%2Fimage.png?alt=media&#x26;token=310af34c-d5e4-44cd-9c30-59236eaf425d" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FB9CjOFdlBCdMVaufZ8Ea%2Fimage.png?alt=media&#x26;token=83ffd26a-5142-44e9-a6ed-3d41121bb6de" alt=""><figcaption></figcaption></figure>

## Inviting a new user

1. Click the `+ Create Users` button at the top of the page to open the `Invite team members` page:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FkgLhGREjL0zArwCpDpuM%2Fimage.png?alt=media&#x26;token=45f4da40-ecdc-4cc4-a8b6-ee05d3940bde" alt="" width="541"><figcaption></figcaption></figure>

2. Enter as many users as needed via a comma-delimited list, then click `Set User Roles`:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FPz4ZDZR4wIb3HKi5pSJC%2Fimage.png?alt=media&#x26;token=67a548d2-edcb-48f3-afe4-322315e6d043" alt="" width="557"><figcaption></figcaption></figure>

3. Here we set the user(s) role(s) as desired:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FOH74b3dsvQbJjOfw0WJO%2Fimage.png?alt=media&#x26;token=87ae6f57-9961-4103-96c8-c58df74cf987" alt="" width="563"><figcaption></figcaption></figure>

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2Fx5pLSAd5pDz8BY1ZBi5L%2Fimage.png?alt=media&#x26;token=5afdbef1-7054-4fbc-bd26-2dc90a4d85a2" alt="" width="553"><figcaption></figcaption></figure>

{% hint style="info" %}
There is also the option to `REMOVE` an invitation from this page in case there is an unintentional e-mail address added. This avoids the need to cancel and start over
{% endhint %}

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FNB66a9WtXck1Y6gVcXlJ%2Fimage.png?alt=media&#x26;token=e83d494d-4e00-4469-83e7-64dba1e71618" alt="" width="563"><figcaption></figcaption></figure>

4. Once the Roles are set as desired, click the `Set User Roles` button to send the invitations.
5. The Users list will now have the invitations listed:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FCDm1RD2PIehUGMF44ljO%2Fimage.png?alt=media&#x26;token=7cb70c9e-fddc-4486-b315-6ed1ec23b937" alt="" width="563"><figcaption></figcaption></figure>

6. If for any reason the invitation needs managed, we provide the options to either resend the invitation or delete it via the selection menu to the right of the invitation:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2Fo0gO4JdNGQa6s6gftnzH%2Fimage.png?alt=media&#x26;token=1011d300-0f2d-473f-ba6e-83a38dfaaa19" alt=""><figcaption></figcaption></figure>

After the recipient accepts an invitation, the new user will appear in the Users list, and the invitation entry will no longer be present.

## Changing a user's role

If for any reason a user's role needs to change it can be updated via the selection menu to the right of the user, by selecting `Change Role` which will open the `EDIT USER` modal:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2F1A2lu6vB1ioyZVudVRi2%2Fimage.png?alt=media&#x26;token=98247d7a-6b86-4f0f-9742-2d90a7a57a4b" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FEDJPYOPyJKnwPeZOlLRv%2Fimage.png?alt=media&#x26;token=d3ceda97-76d7-40a4-8097-6214ec90bc09" alt="" width="464"><figcaption></figcaption></figure>

Change the role as needed, then click `Update` for the change to take effect.

{% hint style="warning" %}
Changing a user's role requires an Owner role account.
{% endhint %}

{% hint style="warning" %}
If the currently logged-in user is the only Owner, the account CANNOT be downgraded. If it must be re-assigned to a lower role, another user must be assigned the Owner role.
{% endhint %}

## Removing a user from the organization

When a user no longer requires access to an organization, it can be removed via the selection menu to the right of the user, by selecting `Remove Access` which will open a confirmation modal, select `Yes, remove` to remove the user from the organization.

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FkerlTZkQ0ZCEd0Znb71N%2Fimage.png?alt=media&#x26;token=68c41a1c-4e6a-46dc-98f5-26b1fd8a9248" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2Fv8mGmWihgJ7sRY7Hjd3I%2Fimage.png?alt=media&#x26;token=313fbb87-df79-4923-98d1-66b90085a343" alt="" width="515"><figcaption></figcaption></figure>

{% hint style="warning" %}
Removing a user requires an Owner role account.
{% endhint %}

{% hint style="warning" %}
If the user being removed is the only Owner assigned role, another user must be assigned the Owner role before the account can be removed.
{% endhint %}

## Leaving an organization

Only Admins and Owners can leave an organization. The selection menu and confirmation modal change slightly where `Remove Access` changes to `Leave Organization` when clicking the selection menu for the currently logged in Admin or Owner:

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FtkMCp5yRygF1E98owleA%2Fimage.png?alt=media&#x26;token=c0683f9b-61de-4873-b397-f7adc3e3856d" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2952342643-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MGjN2Xg1mE8iTvg49dw%2Fuploads%2FD9E5sG3iFqY5x1hBV6tJ%2Fimage.png?alt=media&#x26;token=a18b5f63-2614-4416-9708-7d7250a18b3f" alt="" width="491"><figcaption></figcaption></figure>

Clicking `Yes, leave` will remove the currently logged in user from the organization.

{% hint style="warning" %}
If the currently logged-in user is the only assigned Owner role, then another user must be assigned the Owner role first before an Owner can leave an organization.If the currently logged-in user is the only assigned Owner role, then another user must be assigned the Owner role first before an Owner can leave an organization.If the currently logged in user is the only assigned Owner role, then another user must be assigned the Owner role first, before an Owner can leave an organization.
{% endhint %}

## Role Permissions

Detailed breakdown of organization and configurations management user role permissions.

***There is a special role called "VIEWERNOSECRETS," which has the same permissions as VIEWER but cannot view project secrets.***

<table><thead><tr><th width="244">Organization Permissions</th><th align="center">Owner</th><th align="center">Admin</th><th align="center">Contributor</th><th align="center">Viewer</th></tr></thead><tbody><tr><td>View list of users</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td></tr><tr><td>Create personal API access tokens</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td></tr><tr><td>Create - Update - Delete 3rd-party integrations</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td><td align="center"></td></tr><tr><td>Manage and invite users</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td><td align="center"></td></tr><tr><td>View and Download audit logs</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td><td align="center"></td></tr><tr><td>Update non owner roles and users</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td><td align="center"></td></tr><tr><td>Update owner role and users</td><td align="center">✔️</td><td align="center"></td><td align="center"></td><td align="center"></td></tr><tr><td>Manage Account</td><td align="center">✔️</td><td align="center"></td><td align="center"></td><td align="center"></td></tr></tbody></table>

<table><thead><tr><th width="247">Configuration Permissions</th><th align="center">Owner</th><th align="center">Admin</th><th align="center">Contributor</th><th align="center">Viewer</th></tr></thead><tbody><tr><td>Switch Projects</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td></tr><tr><td>View Project Parameters</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td></tr><tr><td>View Project Secrets</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td></tr><tr><td>View Project Templates</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td></tr><tr><td>Create - Update - Delete Environments</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td></tr><tr><td>Create - Update - Delete Projects</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td></tr><tr><td>Create - Update - Delete Project Parameters</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td></tr><tr><td>Create - Update - Delete Project Templates</td><td align="center">✔️</td><td align="center">✔️</td><td align="center">✔️</td><td align="center"></td></tr></tbody></table>
