# User Management

Manage organization users, roles, and permissions within your Eugo workspace

Source: https://docs.eugo.io/docs/platform/user-management/

---

Control who can access your organization by inviting users, assigning roles, and managing permissions.

## Overview

The User Management interface provides a centralized hub for managing all users within your organization. You can invite new users via email, assign role-based permissions, modify existing user roles, and remove users when needed. The system uses role-based access control (RBAC) to ensure users have appropriate access to organizational resources.

## How It Works

When you invite a user to your organization:

1. The user receives an email invitation to join your organization
2. They can accept or decline the invitation from their inbox
3. Upon acceptance, the user gains access based on their assigned role
4. You can modify their role or remove them at any time

The invitation system supports users who already have a Eugo account as well as new users who will be prompted to create an account.

## Adding Users

To invite a new user to your organization:

1. Navigate to the **Users** tab in your organization dashboard
2. Click the **Add user** button in the toolbar
3. Enter the user's email address
4. Select an appropriate role from the dropdown menu
5. Click **Submit** to send the invitation

<!-- ![Placeholder — Add user form](/images/add-user-form.png) -->

The invited user will receive an email with a link to accept the invitation. They'll appear in your user list immediately with a status of "Invited." Once they accept the invitation, their status changes to "Active."

:::tip
You can invite anyone by email—whether they already have a Eugo account or not. If they're new to Eugo, an account will be created automatically when they accept the invitation.
:::

## User Table Interface

The user list displays all organization members in a table format with the following information:

### Table Columns

- **Name**: User's display name with avatar
- **Email**: The user's email address
- **Role**: Assigned role (e.g., Organization Owner, Workspace Admin)
- **Status**: Invitation and activation status
  - `Active`: User has accepted and is actively using the platform
  - `Invited`: User has been invited but hasn't accepted yet
- **Added on**: Relative timestamp of when the user was added (e.g., "2 hours ago")

### Table Actions

Use the action icons in each row to:
- **Edit** (pencil icon): Modify the user's role
- **Delete** (trash icon): Remove the user from your organization
- **Refresh**: Click the Refresh button to update the user list

:::warning
You cannot remove yourself from the organization.
:::

## Modifying User Roles

To change an existing user's role:

1. Click the **Edit** (pencil) icon next to the user in the table
2. The Edit User drawer will open showing the user's current information
3. Select a new role from the **Role Name** dropdown
4. Click **Submit** to apply the changes

Role changes take effect immediately and update the user's permissions across the platform.

## Removing Users

To remove a user from your organization:

1. Click the **Delete** (trash) icon next to the user's name
2. In the confirmation dialog, review the message: "Are you sure, you want to remove this user from the organization?"
3. Click **Confirm** to proceed with removal

The user will be immediately removed from the organization and will lose access to all organizational resources. This action cannot be undone, but you can re-invite the user if needed.

## User Roles and Permissions

The platform uses hierarchical role-based access control to manage user permissions:

### Organization Owner

Organization Owners have complete control over the organization:

- Full administrative access to all organization features
- Manage users, billing, and organization settings
- Create and manage workspaces
- Access all resources within the organization

Multiple Organization Owners can exist in a single organization for redundancy.

### Custom Roles

Organizations can define custom roles with specific permission sets tailored to their needs. Custom roles can be configured with granular permissions for different platform resources.

## The Invitation System

### Email Invitation Flow

When you invite a user, Eugo sends a branded email invitation containing:

- The inviter's name (who sent the invitation)
- The organization name they're being invited to
- A direct link to accept the invitation
- Organization details and context

### Accepting Invitations

Users can accept invitations by:
1. Clicking the invitation link in their email
2. Logging into Eugo (or creating an account if new)
3. Navigating to their invitations page
4. Reviewing and accepting pending invitations

### Invitation Status

- **Pending**: The user has been invited but hasn't responded yet
- **Accepted**: The user has accepted and is now active in the organization
- **Declined**: The user declined the invitation (they can be re-invited)

:::tip
Invitations don't expire automatically, but you can remove pending invitations by deleting the user from your user list.
:::

## Best Practices

### Assigning Roles

Choose roles based on the principle of least privilege:

- **Organization Owners**: Limit to 2-3 trusted administrators who need full organizational control
- **Workspace Owners**: Assign to team leads or project managers who need workspace-level control
- **Custom Roles**: Create specific roles for developers, viewers, or other specialized needs

### Managing Invitations

- **Double-check email addresses** before sending invitations to avoid bounced emails
- **Follow up on pending invitations** after 48 hours if the user hasn't accepted
- **Remove stale invitations** for users who decline or don't respond after extended periods

### Security and Compliance

- **Review user access quarterly** to ensure users still need their current level of access
- **Remove departing users immediately** to prevent unauthorized access
- **Use Activity Logs** to monitor user actions and detect unusual behavior

## Troubleshooting

### Invitation Not Received

If a user doesn't receive their invitation email:

1. **Verify the email address** is correct in the user table
2. Ask the user to **check spam/junk folders** for emails from `@eugo.io`
3. Try **resending the invitation** by removing and re-adding the user

### Permission Denied

If you see "You do not have access to this resource":

1. Verify you have the Organization Owner role by contacting another admin
2. If you recently joined, ensure you've **accepted the invitation** properly
3. Try **logging out and back in** to refresh your permissions

### User Status Issues

If a user's status isn't updating correctly:

- Click the **Refresh** button to fetch the latest data
- Verify the user has **clicked the invitation link** and completed the acceptance process
- Check if the user has **verified their email address** (required for new accounts)

## Related Documentation

- [Organizations](/docs/platform/organizations) - Learn about organization structure and settings
- [Workspaces](/docs/platform/workspaces) - Understand workspace management and access
- [Activity Logs](/docs/platform/activity-logs) - Monitor user actions and system events
- [Billing](/docs/platform/billing) - Manage your organization's subscription and payments
