> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Users

> The **Users** tab on the ***Identities*** page enables you to manage the users on your Connect AI account.

A **User** is an account that can log in and use Connect AI. For non-human identities, see [Service Accounts](/en/Identities/Service-Accounts). For role definitions and access roles, see [Roles](/en/Identities/Roles).

The **Users** tab contains information about every user in Connect AI.

<Frame>
  <img src="https://mintcdn.com/cdata/BnicZbA-FHUEwDF1/en/images/users.png?fit=max&auto=format&n=BnicZbA-FHUEwDF1&q=85&s=a00c4de9fd5c78964916891147982a79" alt="Users list" width="1203" height="552" data-path="en/images/users.png" />
</Frame>

It contains the following information:

* A search bar for entering a user name.
* Drop-down lists for filtering by workspace name, role, and user status.
* The number of **user seats** that are available on your account.
* A row for every user on your account:
  * **User** displays the email address that is associated with the user.
  * **Workspace** displays the workspaces the user has access to.
  * **Role** indicates the user's system role.
  * **Status** shows the state of the user's account (**Active**, **Inactive**, or **Invited**).
  * Edit and delete icons for the user. If the user's status is **Invited**, there is also an icon to resend the user's invitation.

## Invite Users

<Note>
  If you have Just-in-Time (JIT) provisioning enabled, you do not need to invite users manually.
</Note>

To add users to your Connect AI account, follow these steps:

<Steps>
  <Step>
    In the **Users** tab, click **Invite Users** to open the user invitation dialog.
  </Step>

  <Step>
    Enter the email address of the user that you want to invite. To send multiple invitations at the same time, add a space between each email address.

    <Frame>
      <img src="https://mintcdn.com/cdata/T2BYIMzUdDLJj31G/en/images/user_invite.png?fit=max&auto=format&n=T2BYIMzUdDLJj31G&q=85&s=625a96befa693a2054b8c8f212e1598e" alt="Invite users" width="1347" height="692" data-path="en/images/user_invite.png" />
    </Frame>

    <Note>
      If you invite multiple users at the same time, they have the same roles. You can change their roles individually after sending the invitation.
    </Note>
  </Step>

  <Step>
    Select the **System Role** for the new users.
  </Step>

  <Step>
    (Optional) Select an **Access Role** for the new users.
  </Step>

  <Step>
    (Optional) Select **Permissions** for the new users. Select the allowed permissions for each entity (data connection or virtual schema) in the system. Administrators, Workspace Administrators, and Connection Administrators can edit permissions later.

    For more information about permissions, see [Permissions and Access Control](/en/Permissions).
  </Step>

  <Step>
    Click **Send Invite**. If a user is registered already to an email address that you enter, the dialog prompts you to enter a different email address.
  </Step>
</Steps>

### Accept an Invitation

Follow these steps to set up access after receiving an invitation email:

<Steps>
  <Step>Click **Accept Invite** in the invitation email to open the password creation page.</Step>

  <Step>
    Create a password that meets the provided criteria. After you create a password, the login page
    appears.
  </Step>

  <Step>
    Log in with your email address and your new password. After you log in, the sign-up page
    appears.
  </Step>

  <Step>Enter your first name and last name.</Step>

  <Step>
    Enter the account name and the invite code from the invitation email. Then, click **Complete
    Sign Up**.

    <Frame>
      <img src="https://mintcdn.com/cdata/ns2CnTsbUGKdK2cZ/en/images/users_signup.png?fit=max&auto=format&n=ns2CnTsbUGKdK2cZ&q=85&s=588d3f44b4ce4805b10276c74eca2f65" alt="User signup" width="556" height="509" data-path="en/images/users_signup.png" />
    </Frame>
  </Step>
</Steps>

<Note>
  Connect AI supports Single Sign-On (SSO) through popular SSO providers. If SSO is enabled on your
  account, the invitation flow uses your SSO provider instead of the manual password process.
</Note>

### Manage Invitations

If a user has a pending invitation that they have not accepted, their status displays as **Invited**. Click a pending user to view and manage their invitation.

On this page, you can view the pending user's email address, the expiration time for the invitation, and the invite code. You can also manage the user's invitation, as follows:

* To revoke the invitation and delete the user, click **Delete User**.
* To resend the invitation email to the entered email address, click **Resend Invite**.

## Edit Users

Click a user in the list (or click the **Edit** button) to open the **Edit User** page.

<Frame>
  <img src="https://mintcdn.com/cdata/AmK205Cx8JzrFjzq/en/images/edit_user.png?fit=max&auto=format&n=AmK205Cx8JzrFjzq&q=85&s=a77f2bb383ca3323de2e185d5b47e146" alt="Edit user" width="814" height="816" data-path="en/images/edit_user.png" />
</Frame>

This page contains the following information:

* Editable **First Name** and **Last Name** fields.
* A non-editable **Email** field.
* A drop-down menu to select the user's **System Role** (**Administrator** or **User**). Administrators have full access to the account and every workspace, while Users have access set per workspace.
* The **Workspaces** section contains the workspaces in which to view the user's system and access roles. Select a workspace to view the user's roles in that workspace. Click **+ Add to Workspace** to add the user to an additional workspace. See [Add a User to a Workspace](#add-a-user-to-a-workspace) for details.
* The **General** section contains a drop-down menu for selecting the user's **System Role** within that workspace (**Workspace Administrator**, **Connection Administrator**, **User Administrator**, or **Query**), and an optional **Access Role**. This drop-down is available only for a user whose account-wide system role is **User**. Access roles are created in [Roles](/en/Identities/Roles).

  <Note>
    A user can hold only one system role per workspace. Access Roles are additive, so a user can hold several Access Roles in the same workspace alongside their single system role.
  </Note>
* The **Permissions** section contains check boxes for toggling the user's permissions for each data source. These permissions are for the selected workspace only. (Note that CData Connect Spreadsheets users do not have a permissions section, because they have full permissions.)

To save changes to the user, click **Save Changes**.

## Add a User to a Workspace

A user must be added to a workspace before you can assign them a system role or an access role in that workspace.

<Steps>
  <Step>
    In the **Workspaces** section of the **Edit User** page, click **+ Add to Workspace** to open the **Add User to Workspace** dialog.
  </Step>

  <Step>
    Select the **Workspace** to add the user to.
  </Step>

  <Step>
    Select a **System Role** and an **Access Role** (optional) for the user in the workspace. See [Roles](/en/Identities/Roles) for role definitions.
  </Step>

  <Step>
    Click **Add** to add the user to the workspace.
  </Step>
</Steps>

## Delete a User

To delete a user, click **Delete User** on the **Edit User** page.

<Note>
  If the user is the last remaining Administrator on your account, they cannot be deleted.
</Note>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.