How to Manage Organizations, Users, and Teams in the Admin Console

This guide walks you through administering users, tenant divisions (Organizations), access scopes (Roles), and collaborative partitions (Teams) from the dashboard.

Part A: Managing Tenant Organizations

1. Log in to the Admin Console as a System Administrator.
2. Navigate to the Organizations section.
3. Adding a Tenant:
   • Click Create Organization.
   • Enter the Organization Name (e.g. Acme Corporation).
   • Enter the unique Domain identifier (e.g. acme.com).
   • Save. The organization partition is created, and standard roles (ORG_ADMIN, MEMBER) are initialized automatically for this tenant context.
4. Limits & Plans:
   • Open the organization details tab to inspect active licenses, MAU consumption levels, and OIDC client limits.

Part B: Managing Users

1. Navigate to the Users section on the main menu.
2. Creating a User:
   • Click Invite User or Create User.
   • Enter their Email, First Name, Last Name, Country, and Mobile Number.
   • Select their target Organization context.
   • Click Save.
3. User Configurations & Actions:
   • Edit Profile: Update names, phone numbers, or account status (Active/Inactive/Suspended).
   • Reset Password: Generate a secure temporary password or trigger a password reset link.
   • Manage Security Settings: Turn on Multi-Factor Authentication (2FA) or disable password logins to enforce passwordless magic link/OTP logins.
   • Generate Backup Codes: Generate backup access tokens for emergency MFA recovery.

Part C: Managing Teams & Roles (Access Control)

Teams and Roles segment user privileges inside their tenant organization.

1. Creating Teams

1. Navigate to the Teams management tab.
2. Click Create Team.
3. Enter a name (e.g., Engineering or Finance Support) and description.
4. Click Save.

2. Linking Users to Teams & Roles

1. Open the profile of a user.
2. Go to the Access Management section.
3. Assigning Roles: Check target role boxes (e.g. assign ORG_ADMIN to grant tenant admin privileges, or MEMBER for normal access).
4. Assigning Teams: Select teams from the multi-select dropdown.
5. Click Update Access. The user's JWT access tokens will reflect these role and team claims during subsequent OIDC logins.