User management

You manage who can access your Osuite account, and what each person can do, in the Osuite UI under Settings → Users. Users sign in either with an email invite and a password, or through your identity provider if you have configured single sign-on.

Invite a user

1. Open the Osuite UI and go to Settings → Users.
2. Invite the person by email address.
3. They receive an invitation email and set a password to complete sign-up. If SSO is configured, they can sign in through your identity provider instead.

Assign roles and permissions

Each user’s permissions are assigned per user in Settings → Users. Set them when the user first appears in the list, and adjust them at any time.

Note

Permissions live in Osuite, not in your identity provider. Even for users who sign in through SSO, Osuite does not read roles from OIDC claims — assign every user’s permissions here.

Remove a user

Remove a user in Settings → Users to revoke their access. Their sign-in stops working immediately, whether they signed in with a password or through SSO.

Next steps

• Single sign-on with OIDC — let users sign in through your identity provider
• API keys and ingest tokens — manage the credentials the CLI and agents use