Users and Groups

Manage users and groups for access control and collaboration.

Overview

The platform supports:

  • Local Users: Username/password authentication

  • SSO Users: SAML/OAuth integration

  • LDAP Users: Active Directory integration

  • Groups: Organize users for easier management

Creating Users

Local Users

Via Web UI: 1. Navigate to Settings → Users 2. Click Create User 3. Enter user details: * Email: user@example.com * Name: John Doe * Role: Member 4. Set temporary password 5. Click Create

User receives password reset email.

SSO/LDAP Users

Auto-provisioned on first login when SSO/LDAP is configured.

When SAML group-to-role mapping is enabled, users are automatically assigned roles based on their Identity Provider group memberships. Roles are updated on each login and cannot be changed in the Governor UI.

Similarly, LDAP authorities can manage roles from the directory server.

Managing Groups

Creating Groups

  1. Navigate to Settings → Groups

  2. Click Create Group

  3. Enter group name: "Data Engineers"

  4. Add members

  5. Assign to projects

Group Permissions

Assign permissions to groups: * All group members inherit permissions * Easier than individual user management * Sync with LDAP/AD groups

User Status

  • Active: Can log in and use the platform

  • Inactive: Disabled, cannot log in

  • Pending: Awaiting activation

Best Practices

  1. Use Groups: Assign permissions to groups, not individuals

  2. Regular Reviews: Review user access quarterly

  3. Disable Inactive: Disable accounts for departed users

  4. Principle of Least Privilege: Grant minimum required access

See Also