> For the complete documentation index, see [llms.txt](https://docs.denvrdata.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.denvrdata.com/docs/platform/user-management.md).

# User management

The Tenant Administrator role has the following permissions for user management

* Invite others to the team
* Remove members from the team
* Reset passwords of members
* Configure MFA

## Creating users

In the dashboard, select Administration - Users then select the button `Create new user`

<figure><img src="/files/LSdwFHGrUJfu3OxL5sLY" alt="" width="247"><figcaption></figcaption></figure>

Enter the name of the user and the email address.

On the Roles tab, you can enable two capabilities (default is `User`):

| Role        | Permissions                                                                                                                                                          |
| ----------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| TenantAdmin | <ul><li>Apps, VMs, bare metal</li><li>web support tickets</li><li>VPC management</li><li>user management</li><li>billing management</li><li>cost and usage</li></ul> |
| User        | <ul><li>Apps, VMs, bare metal</li><li>web support tickets</li></ul>                                                                                                  |

<figure><img src="/files/2x4fW8uW2dbmgE8w7Kq5" alt="" width="563"><figcaption></figcaption></figure>

When you select Save, an email will be generated to invite the new user to Tenant.

## Deleting users

From the user list, use the Action pull-down button and choose `Delete`.

<figure><img src="/files/oReiXXJSmFgLf8bdsRlA" alt=""><figcaption></figcaption></figure>

## Requiring multi-factor (MFA)

During user create, or edit create, please check `Two factor authentication enabled`.  This will require the user to setup their authenticator on next login.

<figure><img src="/files/kvRHLFeRct4ll4vozk6Z" alt="" width="297"><figcaption></figcaption></figure>

## Using single sign-on (SSO)

Denvr AI Services supports OIDC for single-signon at a tenant level.  Please contact the support team to enable this for your organization.