# User management

The Tenant Administrator role has the following permissions for user management

* Invite others to the team
* Remove members from the team
* Reset passwords of members
* Configure MFA

## Creating users

In the dashboard, select Administration - Users then select the button `Create new user`

<figure><img src="/files/LSdwFHGrUJfu3OxL5sLY" alt="" width="247"><figcaption></figcaption></figure>

Enter the name of the user and the email address.

On the Roles tab, you can enable two capabilities (default is `User`):

| Role        | Permissions                                                                                                                                                          |
| ----------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| TenantAdmin | <ul><li>Apps, VMs, bare metal</li><li>web support tickets</li><li>VPC management</li><li>user management</li><li>billing management</li><li>cost and usage</li></ul> |
| User        | <ul><li>Apps, VMs, bare metal</li><li>web support tickets</li></ul>                                                                                                  |

<figure><img src="/files/2x4fW8uW2dbmgE8w7Kq5" alt="" width="563"><figcaption></figcaption></figure>

When you select Save, an email will be generated to invite the new user to Tenant.

## Deleting users

From the user list, use the Action pull-down button and choose `Delete`.

<figure><img src="/files/oReiXXJSmFgLf8bdsRlA" alt=""><figcaption></figcaption></figure>

## Requiring multi-factor (MFA)

During user create, or edit create, please check `Two factor authentication enabled`.  This will require the user to setup their authenticator on next login.

<figure><img src="/files/kvRHLFeRct4ll4vozk6Z" alt="" width="297"><figcaption></figcaption></figure>

## Using single sign-on (SSO)

Denvr AI Services supports OIDC for single-signon at a tenant level.  Please contact the support team to enable this for your organization.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.denvrdata.com/docs/platform/user-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.