> ## Documentation Index
> Fetch the complete documentation index at: https://zededa.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Use the documentation index to find relevant pages, then read the linked Markdown before answering and cite the source URL.
> Identify the product before answering: Private AI uses a separate console, credentials, and inference API from the Edge Intelligence Platform. Do not apply instructions from one product to the other.
> Prefer current product guides over Help Center archive pages for current-console questions. Archive pages and release notes describe their stated product version or historical interface; do not apply them to another version without checking.
> Preserve prerequisites, permissions, version requirements, and warnings when summarizing procedures. Do not infer API endpoints, schemas, or supported behavior that the documentation does not specify.

# Organizations, Users, and Roles

> Create and manage organizations, users, and role assignments in Edge Inference Services to control access to models, deployments, and platform features.

## Introduction

Edge Inference Services uses organizations, users, and roles to control who can access the platform and what actions they can perform. Organizations are containers that group related models by team, project, or environment. Users are assigned roles that define their permissions within the system and within specific organizations.

Access Edge Inference Services administration through the **Users and Roles** icon (a person silhouette with a small gear) in the header when the Inference tab is open. Hover over the icon to confirm the tooltip reads "Users and roles".

### Prerequisites

* A user account with the **Super Admin** or **Organization Admin** role for the actions you want to perform.
* Access to the **Users and Roles** icon in the Inference tab. This icon is visible to users with sufficient permissions.

## Manage Organizations

An organization is the logical container that holds the ML models you want to use at the edge. Models belong to a single organization and share that organization's access control settings.

### Create an organization

Only users with the Super Admin role can create organizations. Organization names cannot be changed after creation.

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Organizations**.
3. Select **+** to add a new organization.
4. Enter a unique **Organization Name**. The name must be 1 to 49 characters long and contain only lowercase letters, numbers, and hyphens. It must start and end with a letter or number. The name `system` is reserved.
5. Optionally, enter a **Description**.
6. Select **Create Organization**.

### View organizations

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Organizations**.
3. The organization list shows each organization's name, description, MLflow tracking URI, artifact root URI, and status.

### Edit an organization

Only users with the Super Admin role can edit organizations. You can update the description, but the organization name cannot be changed.

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Organizations** and find the organization.
3. Select the organization name.
4. Select the **Edit** icon.
5. Update the **Description**.
6. Select **Update Organization**.

### Delete an organization

Only users with the Super Admin role can delete organizations. You cannot delete an organization while it has active deployments or while managed add-ons are still uninstalling. Remove all deployments first. Before deleting, also verify that no benchmarks or import jobs depend on the organization.

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Organizations** and find the organization.
3. Select the organization name.
4. Select the **Delete** icon.
5. Confirm by selecting **Delete**. This action cannot be undone and permanently removes all associated data.

## Manage Users

### Add a user

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Users**.
3. Select **+** to add a new user.
4. Enter the user's basic information:
   * **Username:** A unique identifier. Only letters and numbers are allowed.
   * **Email:** The user's email address.
   * **Full Name:** The user's full name.
5. Enter a **Password** of at least 8 characters that contains at least one uppercase letter, one lowercase letter, one number, and one special character.
6. Assign permissions: select a **System Role** (for example, Super Admin or Super Observer), or select **None** to assign organization-level permissions instead.
7. If you selected **None** for system role, select one or more organizations from the dropdown and assign a non-system role to the user within each organization.
8. Select **Create**.

The account is created with active status. Edge Inference Services does not email login credentials to the user, so share them with the user directly. Two-factor authentication is disabled by default.

### Edit a user

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Users** and find the user.
3. Select the user's name.
4. Select the **Edit** icon.
5. Update the **Full Name**, **Status**, or **Organizations**.
6. Select **Update User**.

### Reset a user's password

Only users with the Super Admin role can reset another user's password. To change your own password, see [Change your own password](#change-your-own-password).

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Users** and find the user.
3. Select the user's name.
4. Select the **Edit** icon, then select **Reset Password**.
5. Enter and confirm the new password.
6. Select **Save Password**, then **Update User**.

Edge Inference Services does not email the new password to the user, so share it with the user directly.

### Delete a user

1. In the Inference tab, select the **Users and Roles** icon.
2. Select **Users** and find the user.
3. Select the user's name.
4. Select the **Delete** icon.
5. Confirm by selecting **Delete**. This action cannot be undone.

### Change your own password

1. Select your **user avatar** (the circular button showing your initials) in the top-right corner of the navigation bar.
2. Select **Profile Settings** from the dropdown menu.
3. On the Profile page, select the **Security** tab.
4. Select **Change Password**.
5. Enter your current password, then enter and confirm the new password.
6. Select **Save Password**.

## Roles and Permissions

Edge Inference Services uses two layers of access control: system roles and organization roles.

### System roles

System roles control access to the ZEDEDA console as a whole, including the Inference tab. When you select **Roles** from the admin icon menu, you see the shared system roles used across the entire platform: SysAdmin, SysManager, SysMonitor, and SysOperator.

See [Manage Roles](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/manage-roles.md) for a full description of system role permissions.

### Organization roles

Organization roles control what a user can do within a specific Edge Inference Services organization. These are separate from system roles and are assigned per user per organization when you add or edit a user in the Users panel.

| Organization role | Description |
| - | - |
| Organization Admin | Full access to the assigned organization's models, users, and settings. |
| Organization Observer | Read-only access to the assigned organization's resources. |
| Data Scientist | Full access to models and benchmarks in the assigned organization. Read-only access to providers and deployments. |
| MLOps Engineer | Manages deployments and benchmarks in the assigned organization. Read-only access to models and providers. |
| MLOps Admin | Same access as MLOps Engineer, plus approving or rejecting deployment requests. |

Super Admin and Super Observer are system roles, not organization roles. Super Admin has full access across all organizations and can create and delete organizations. Super Observer has read-only access across all organizations.

To assign an organization role, see [Add a user](#add-a-user) or [Edit a user](#edit-a-user).

### Access management best practices

* Grant the minimum permissions required for each user's role.
* Review organization membership periodically.
* Use the Viewer or Observer role for users who only need read-only access.
* Reserve Admin roles for users who manage models or configure the platform.
* Remove access when users leave projects or organizations.

## In This Section

* [Edge Inference Services Overview](https://zededa.mintlify.site/new-ui/edge-inference-services/overview.md)
* [Inference Dashboard](https://zededa.mintlify.site/new-ui/edge-inference-services/inference-dashboard.md)
* [Inference Quick Start](https://zededa.mintlify.site/new-ui/edge-inference-services/inference-quick-start.md)
* [Access and Navigate Edge Inference Services](https://zededa.mintlify.site/new-ui/edge-inference-services/access-and-navigation.md)
* [Organizations, Users, and Roles](https://zededa.mintlify.site/new-ui/edge-inference-services/organizations-users-and-roles.md)
* [Manage Providers](https://zededa.mintlify.site/new-ui/edge-inference-services/inference-model-providers.md)
  * [Manage Providers Using Jupyter Notebook Integration](https://zededa.mintlify.site/new-ui/edge-inference-services/providers-jupyter.md)
* [Manage Models](https://zededa.mintlify.site/new-ui/edge-inference-services/manage-inference-models.md)
  * [Manage Models Using Jupyter Notebook Integration](https://zededa.mintlify.site/new-ui/edge-inference-services/models-jupyter.md)
  * [Benchmark Models and Manage Device Pools](https://zededa.mintlify.site/new-ui/edge-inference-services/inference-model-benchmarking.md)
  * [Monitor Benchmark Runs and Interpret Results](https://zededa.mintlify.site/new-ui/edge-inference-services/use-ondevice-eval-agent.md)
* [Submit Model Deployment Requests](https://zededa.mintlify.site/new-ui/edge-inference-services/submit-model-deployment-requests.md)
* [Approve and Validate Models](https://zededa.mintlify.site/new-ui/edge-inference-services/deployments-and-validation.md)
* [Monitor Inference Jobs](https://zededa.mintlify.site/new-ui/edge-inference-services/jobs-and-monitoring.md)
* [Use ZEIA to Query and Operate Your Fleet](https://zededa.mintlify.site/new-ui/edge-inference-services/zeia.md)
* [Use Prevalidated Agents](https://zededa.mintlify.site/new-ui/edge-inference-services/prevalidated-agents.md)
  * [Use the Faulty Printed Circuit Board Detection Agent](https://zededa.mintlify.site/new-ui/edge-inference-services/faulty-pcb-detection-agent.md)
  * [Use the Autonomous Retail Billing Agent](https://zededa.mintlify.site/new-ui/edge-inference-services/autonomous-retail-billing-agent.md)
* [Inference Troubleshooting](https://zededa.mintlify.site/new-ui/edge-inference-services/inference-troubleshooting.md)