> ## Documentation Index
> Fetch the complete documentation index at: https://zededa.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Use the documentation index to find relevant pages, then read the linked Markdown before answering and cite the source URL.
> Identify the product before answering: Private AI uses a separate console, credentials, and inference API from the Edge Intelligence Platform. Do not apply instructions from one product to the other.
> Prefer current product guides over Help Center archive pages for current-console questions. Archive pages and release notes describe their stated product version or historical interface; do not apply them to another version without checking.
> Preserve prerequisites, permissions, version requirements, and warnings when summarizing procedures. Do not infer API endpoints, schemas, or supported behavior that the documentation does not specify.

# Manage Users

> Invite, edit, activate, deactivate, and remove users in your Edge Infrastructure Services enterprise.

Users are individuals who sign in to the Edge Infrastructure Services console. Users are assigned a role that governs their permissions within the enterprise.

## Introduction

This procedure covers how to create users, edit their profiles, manage their account state, and remove them from your enterprise.

Users are accessed from the **Users and roles** icon in the console header.

> [!NOTE]
>
> The action controls for a user (**Edit user**, **Reset password**, **Activate**, **Deactivate**, and **Delete user**) appear only when your role grants the matching permission on the Users resource type. If your role lacks a permission, the console hides that control instead of showing it in a disabled (greyed-out) state. A control that you do not see indicates a permission gap, not a product error. When a user offers no actions you are permitted to take, the console hides the action group entirely. To change what you can do, ask a SysAdmin to review your role. See [Manage Roles](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/manage-roles.md).

## Prerequisites

* You have the SysAdmin role in your enterprise. See [Manage Roles](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/manage-roles.md).

## Users List

The users list displays the following columns:

| Column | Description |
| - | - |
| **Name** | The user's display name. Click to open the user detail page. |
| **Email** | The user's contact email address. |
| **Role** | The role assigned to the user. |
| **State** | The user's account state. |
| **Last Login** | When the user last signed in. |
| **Auth type** | The authentication method: Local or OAuth. |
| **Origin** | Whether the user was created in this enterprise or inherited from a parent enterprise. |

To search for a user, enter a name or email address in the search box. Entering a name returns users whose display name matches. Entering an email address (any value that includes `@`) returns users whose contact email matches. Use the filter panel to narrow the list by the following criteria: State, Role, Auth type, and Origin.

The row action menu for each user includes the following actions: **Activate** or **Deactivate** (toggles based on current state), **Reset password**, and **Delete**.

## User States

| State | Description |
| - | - |
| Active | The user can sign in to the enterprise. |
| Inactive | The user's account exists but sign-in is blocked. |
| Invitation pending | The user was invited but has not yet accepted. |

## Create a User

1. Select the **Users and roles** icon in the header, then select **Users**.

2. Click the **+** button in the bottom-right corner.

3. In the **Identity** section, complete the following fields:

   | Field | Required | Notes |
   | - | - | - |
   | First name | Yes | Maximum 256 characters. |
   | Last name | Yes | Maximum 256 characters. |
   | Profile type | Yes | Select **Local** for password-based authentication or **OAuth** for OAuth-based authentication. |
   | Username | Yes | Must be a valid email address format. Used to sign in. Maximum 254 characters. |
   | Email | Yes | Contact email address. |
   | Password | Yes (Local only) | 8 to 64 characters. Must include at least one uppercase letter, one lowercase letter, one number, and one special character. |
   | Confirm Password | Yes (when password is set) | Must match the Password field. |

4. In the **Role** section, select the role to assign to the user. After you select a role, a permission preview panel appears showing what the role grants across Administration, Fleet, and Workloads resource groups.

5. Click **Create user**.

## Edit a User

1. Select the **Users and roles** icon in the header, then select **Users**.

2. Click the user's name to open the detail page.

3. Click the **Edit user** button (gear icon) in the page header.

4. Update any of the following fields:

   | Field | Editable | Notes |
   | - | - | - |
   | First name | Yes | |
   | Last name | Yes | |
   | Email | Yes | |
   | Mobile number | Yes | Select country code and enter phone number. |
   | Role | Yes | Select a different role from the dropdown. |
   | Timezone | Yes | Select the user's preferred timezone. |
   | Email notifications | Yes | Toggle on or off. |
   | Phone notifications | Yes | Toggle on or off. |
   | Username | No | Read-only after creation. |
   | User ID | No | Read-only. |

5. Click **Save**.

You cannot edit your own account from the Users page.

## User Detail Page

Open a user's detail page by clicking a name in the users list. The detail page is organized into the following tabs:

| Tab | Content |
| - | - |
| **Profile** | Identity information (name, email, username, user ID), communication preferences (email and phone notifications), and account activation state. |
| **Assignment** | The role assigned to the user, with a permission matrix showing what the role grants across resource groups. |
| **Activity** | A log of recent events for this user, showing timestamp, severity, message, and source. Visible only to users with event-read permission. |

## Activate or Deactivate a User

Deactivating a user blocks the sign-in without deleting the account or removing the role assignment.

**From the user detail page:**

1. Select the **Users and roles** icon in the header, then select **Users**.
2. Click the user's name to open the detail page.
3. Click **Activate** to re-enable sign-in, or **Deactivate** to block sign-in.

**From the users list:**

1. Click the row action menu next to the user.
2. Select **Activate** or **Deactivate**.

You cannot deactivate your own account.

## Reset a User's Password

**From the user detail page:**

1. Select the **Users and roles** icon in the header, then select **Users**.
2. Click the user's name to open the detail page.
3. Click **Reset password** (key icon).
4. In the Reset Password dialog, enter the new password in **New password** and again in **Confirm password**.
5. Click **Reset**. The system immediately invalidates the current password.

**From the users list:**

1. Click the row action menu next to the user.
2. Select **Reset password**.
3. In the Reset Password dialog, enter the new password in **New password** and again in **Confirm password**.
4. Click **Reset**. The system immediately invalidates the current password.

## Delete a User

Deleting a user permanently removes the account and immediately revokes the access to the enterprise.

**To delete a single user from the detail page:**

1. Select the **Users and roles** icon in the header, then select **Users**.
2. Click the user's name to open the detail page.
3. Click the **Delete user** button (trash icon) in the page header.
4. Review the confirmation message, then click **Delete**.

**To delete a single user from the list:**

1. Click the row action menu next to the user.
2. Select **Delete**.
3. Review the confirmation message, then click **Delete**.

**To delete multiple users at once:**

1. In the Users list, select the checkboxes for the users you want to delete.
2. From the **Bulk Actions** dropdown, select **Delete**.
3. Review the count in the confirmation dialog, then click **Confirm**. Your own account is automatically excluded even if selected.

You cannot delete your own account.

## Next Steps

> [card] [Manage Roles](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/manage-roles.md)
>
> Create and configure the roles you assign to users.

> [card] [Configure Two-Factor Authentication](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/configure-2fa.md)
>
> Require 2FA across your enterprise.

> [card] [Enable Single Sign-On](https://zededa.mintlify.site/new-ui/infrastructure-services/administration/enable-sso.md)
>
> Authenticate users through an external identity provider.