Skip to main content
This page is admin-only. Find this section within the sidebar under the Configuration group.
The Users & Access page lets admins manage who can use Cielara and what they can do.

​
User List

The main view shows all users in your organization. Each entry shows the user’s name, email, role, and status.

​
Adding a User

  1. Click Create.
  2. Fill in the form:
    • Email Address: the user’s email.
    • User Role: click one of the role chips, Admin or User. See Roles for what each can reach.
  3. Click Add User.
The user receives an invitation email with a registration link. They open the email and follow the link, set a password, and their account is active. If your organization uses SSO, the registration page sends them to your identity provider instead. See Authentication.

​
Editing a User

  1. Click a user in the list to open their profile.
  2. Change their role, or set their account status:
    • Active: the user can sign in.
    • Inactive: the account is preserved but sign-in is blocked.
  3. Click Update User.
If the user you’re editing is the only admin, the Admin role is locked. Add another admin before changing their role.
To remove someone’s access permanently, delete their account from the profile view. Setting the account to Inactive blocks sign-in while preserving the account, and is reversible.

​
Roles

Cielara has two built-in roles:
RoleAccess
AdminFull access to all features, including Configuration pages (Users & Access, Models, Authentication, Connections setup), Impact dashboard, and admin-only API endpoints.
UserAccess to Analytics, World Model, Ask Cielara, and the knowledge base, plus read-only access to Connections. Cannot manage users, configure LLM providers, or set up SSO.