Users
Users are people (or service principals where supported) that can sign in and receive roles in your organization and tenants. The identity UI shows org-wide user lists and tenant-scoped user lists, depending on where you are.
Organization users
Identity Management → Users (org level) shows members of the organization with search and table controls. Use this to understand who belongs to the org at a high level. Exact columns (email, name, role, last active, and so on) follow your deployment’s data model.
Tenant users
Tenant settings → Users (see Tenants) lists users relevant to the selected tenant, again with search and standard table features.
Roles
Invitations and policy often refer to these role names (labels may be localized in the product):
| Role (internal name) | Typical use |
|---|---|
| owner | Broad control over the org/tenant, including high–risk settings. |
| admin | User and settings management, including invitations and some SSO and collector update policy where applicable. |
| member | Day-to-day work in apps with read/write on assigned resources. |
| viewer | Read–only access to permitted resources. |
The available roles list when inviting users is loaded from the product API; if the network call fails, the UI may fall back to a default list so invitations still work. Always align operational procedures with the roles your environment actually returns.
Permissions model (reference)
The platform’s permission strings (used in API tokens and server checks) include organization:read / organization:write, tenant:read / tenant:write, user:read / user:write, and resource–specific scopes for pipelines, collectors, metrics, and more. The Identity Management UI does not expose every string; it uses role membership and a small set of permission checks to show or hide New tenant, Invite user, Configure SSO, and similar controls.
Invite user
Invite user is available on org-level Users and Invitations tabs, and in tenant Users / Invitations, when your account has organization write (org flows) or the appropriate tenant rights (tenant flows). The modal is described in Invitations.