> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cielara.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Users & Access

> Manage users, roles, and permissions.

> [!NOTE]
>
> This page is admin-only. Find this section within the sidebar under the Configuration group.

The Users & Access page lets admins manage who can use Cielara and what they can do.

## User List

The main view shows all users in your organization. Each entry shows the user's name, email, role, and status.

## Adding a User

1. Click **Create**.
2. Fill in the form:
   * **Email Address**: the user's email.
   * **User Role**: click one of the role chips, **Admin** or **User**. See [Roles](#roles) for what each can reach.
3. Click **Add User**.

The user receives an invitation email with a registration link. They open the email and follow the link, set a password, and their account is active. If your organization uses SSO, the registration page sends them to your identity provider instead. See [Authentication](https://docs.cielara.ai/authentication.md).

## Editing a User

1. Click a user in the list to open their profile.
2. Change their role, or set their account status:
   * **Active**: the user can sign in.
   * **Inactive**: the account is preserved but sign-in is blocked.
3. Click **Update User**.

> [!WARNING]
>
> If the user you're editing is the only admin, the Admin role is locked. Add another admin before changing their role.

To remove someone's access permanently, delete their account from the profile view. Setting the account to **Inactive** blocks sign-in while preserving the account, and is reversible.

## Roles

Cielara has two built-in roles:

<table>
  <colgroup>
    <col width="100" />

    <col width="613" />
  </colgroup>

  <thead>
    <tr>
      <th>Role</th>
      <th>Access</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>**Admin**</td>
      <td>Full access to all features, including Configuration pages (Users & Access, Models, Authentication, Connections setup), Impact dashboard, and admin-only API endpoints.</td>
    </tr>

    <tr>
      <td>**User**</td>
      <td>Access to Analytics, World Model, Ask Cielara, and the knowledge base, plus read-only access to Connections. Cannot manage users, configure LLM providers, or set up SSO.</td>
    </tr>
  </tbody>
</table>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.