Users
User management is a core component of Cast AI's role-based access control (RBAC) system. Users represent individual members of your organization who need access to Cast AI resources, whether they're platform engineers managing clusters, developers working with workloads, or analysts tracking costs.
Understanding users in Cast AI
Each user in your organization can be assigned specific roles and access levels, allowing them to perform their required tasks while maintaining security boundaries. Users can be:
- Added directly to your organization through email invitations
- Automatically provisioned through SSO integration
- Assigned to user groups for easier management
- Given individual role bindings to specific resources (Coming soon!)
Access levels and scope
When managing users, you can control their access in two ways:
- Direct role assignments - Roles can be assigned directly to individual users
- Group membership - Users inherit roles and permissions from the groups they belong to
These assignments can be scoped to:
- The entire organization
- Specific clusters
To learn more about user groups, see User Groups.
User states and authentication
Users in your organization can exist in different states:
- Invite pending - Users who have received an invitation but haven't yet accessed Cast AI. Note that a pending invitation can be revoked as well.
- Active - Users who have accepted their invitation and can access resources that their role allows.
Authentication can happen through:
- Email/password authentication
- Single Sign-On (SSO), if configured for your organization
User management
Consider these guidelines when managing users:
- Follow the principle of least privilege when assigning roles
- Use user groups instead of individual assignments when managing multiple users with similar access needs
- Regularly review user access and remove unused accounts
- Configure SSO to automate user provisioning and de-provisioning
Default behavior
When users first join Cast AI:
- Users invited directly receive the Viewer role by default
- Users accessing through SSO receive roles based on your SSO configuration
- All new users must accept Cast AI's terms of service and privacy policy before accessing the platform
Ready to manage users?
Explore our step-by-step guides below to start managing users in your organization. Whether you need to invite new team members, adjust their access levels, or review existing permissions, these guides will walk you through each process.
Available guides:
Each guide provides detailed instructions and examples to help you effectively manage your organization's users.
Updated 3 days ago