Organizations, Users, and Roles

​

Introduction

Edge Inference Services uses organizations, users, and roles to control who can access the platform and what actions they can perform. Organizations are containers that group related models by team, project, or environment. Users are assigned roles that define their permissions within the system and within specific organizations. Access Edge Inference Services administration through the Users and Roles icon (a person silhouette with a small gear) in the header when the Inference tab is open. Hover over the icon to confirm the tooltip reads “Users and roles”.

​

Prerequisites

• A user account with the Super Admin or Organization Admin role for the actions you want to perform.
• Access to the Users and Roles icon in the Inference tab. This icon is visible to users with sufficient permissions.

​

Manage Organizations

An organization is the logical container that holds the ML models you want to use at the edge. Models belong to a single organization and share that organization’s access control settings.

​

Create an organization

Only users with the Super Admin role can create organizations. Organization names cannot be changed after creation.

1. In the Inference tab, select the Users and Roles icon.
2. Select Organizations.
3. Select + to add a new organization.
4. Enter a unique Organization Name. The name must be 1 to 49 characters long and contain only lowercase letters, numbers, and hyphens. It must start and end with a letter or number. The name system is reserved.
5. Optionally, enter a Description.
6. Select Create Organization.

​

View organizations

1. In the Inference tab, select the Users and Roles icon.
2. Select Organizations.
3. The organization list shows each organization’s name, description, MLflow tracking URI, artifact root URI, and status.

​

Edit an organization

Only users with the Super Admin role can edit organizations. You can update the description, but the organization name cannot be changed.

1. In the Inference tab, select the Users and Roles icon.
2. Select Organizations and find the organization.
3. Select the organization name.
4. Select the Edit icon.
5. Update the Description.
6. Select Update Organization.

​

Delete an organization

Only users with the Super Admin role can delete organizations. You cannot delete an organization while it has active deployments or while managed add-ons are still uninstalling. Remove all deployments first. Before deleting, also verify that no benchmarks or import jobs depend on the organization.

1. In the Inference tab, select the Users and Roles icon.
2. Select Organizations and find the organization.
3. Select the organization name.
4. Select the Delete icon.
5. Confirm by selecting Delete. This action cannot be undone and permanently removes all associated data.

​

Manage Users

​

Add a user

1. In the Inference tab, select the Users and Roles icon.
2. Select Users.
3. Select + to add a new user.
4. Enter the user’s basic information:
   • Username: A unique identifier. Only letters and numbers are allowed.
   • Email: The user’s email address.
   • Full Name: The user’s full name.
5. Enter a Password of at least 8 characters that contains at least one uppercase letter, one lowercase letter, one number, and one special character.
6. Assign permissions: select a System Role (for example, Super Admin or Super Observer), or select None to assign organization-level permissions instead.
7. If you selected None for system role, select one or more organizations from the dropdown and assign a non-system role to the user within each organization.
8. Select Create.

The account is created with active status. Edge Inference Services does not email login credentials to the user, so share them with the user directly. Two-factor authentication is disabled by default.

​

Edit a user

1. In the Inference tab, select the Users and Roles icon.
2. Select Users and find the user.
3. Select the user’s name.
4. Select the Edit icon.
5. Update the Full Name, Status, or Organizations.
6. Select Update User.

​

Reset a user’s password

Only users with the Super Admin role can reset another user’s password. To change your own password, see Change your own password.

1. In the Inference tab, select the Users and Roles icon.
2. Select Users and find the user.
3. Select the user’s name.
4. Select the Edit icon, then select Reset Password.
5. Enter and confirm the new password.
6. Select Save Password, then Update User.

Edge Inference Services does not email the new password to the user, so share it with the user directly.

​

Delete a user

1. In the Inference tab, select the Users and Roles icon.
2. Select Users and find the user.
3. Select the user’s name.
4. Select the Delete icon.
5. Confirm by selecting Delete. This action cannot be undone.

​

Change your own password

1. Select your user avatar (the circular button showing your initials) in the top-right corner of the navigation bar.
2. Select Profile Settings from the dropdown menu.
3. On the Profile page, select the Security tab.
4. Select Change Password.
5. Enter your current password, then enter and confirm the new password.
6. Select Save Password.

​

Roles and Permissions

Edge Inference Services uses two layers of access control: system roles and organization roles.

​

System roles

System roles control access to the ZEDEDA console as a whole, including the Inference tab. When you select Roles from the admin icon menu, you see the shared system roles used across the entire platform: SysAdmin, SysManager, SysMonitor, and SysOperator. See Manage Roles for a full description of system role permissions.

​

Organization roles

Organization roles control what a user can do within a specific Edge Inference Services organization. These are separate from system roles and are assigned per user per organization when you add or edit a user in the Users panel. Super Admin and Super Observer are system roles, not organization roles. Super Admin has full access across all organizations and can create and delete organizations. Super Observer has read-only access across all organizations. To assign an organization role, see Add a user or Edit a user.

​

Access management best practices

• Grant the minimum permissions required for each user’s role.
• Review organization membership periodically.
• Use the Viewer or Observer role for users who only need read-only access.
• Reserve Admin roles for users who manage models or configure the platform.
• Remove access when users leave projects or organizations.

​

In This Section

• Edge Inference Services Overview
• Inference Dashboard
• Inference Quick Start
• Access and Navigate Edge Inference Services
• Organizations, Users, and Roles
• Manage Providers
  • Manage Providers Using Jupyter Notebook Integration
• Manage Models
  • Manage Models Using Jupyter Notebook Integration
  • Benchmark Models and Manage Device Pools
  • Monitor Benchmark Runs and Interpret Results
• Submit Model Deployment Requests
• Approve and Validate Models
• Monitor Inference Jobs
• Use ZEIA to Query and Operate Your Fleet
• Use Prevalidated Agents
  • Use the Faulty Printed Circuit Board Detection Agent
  • Use the Autonomous Retail Billing Agent
• Inference Troubleshooting