> ## Documentation Index
> Fetch the complete documentation index at: https://private-7c7dfe99-home-button.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# Manage cloud users
> This page describes how administrators can add users, manage assignments, and remove users
export const EnterprisePlanFeatureBadge = ({feature = 'This feature', support = false, linking_verb_are = false}) => {
return
Enterprise plan feature
{feature} {linking_verb_are ? 'are' : 'is'} available in the Enterprise plan. {support ? `Contact support to enable this feature.` : 'To upgrade, visit the plans page in the cloud console.'}
;
};
export const Image = ({img, alt, size}) => {
return
;
};
This guide is intended for users with the Admin role in ClickHouse Cloud.
Add users to your organization
Invite users
Administrators may invite multiple users at a time and assign one or more roles at the time of invitation.
Access organization settings and select Users and roles
From the services page, select the name of your organization. Select the `Users and roles` menu item from the popup menu.
Select 'Invite members' in the upper left corner
Click the `Invite members` button in the upper left corner.
Enter the email address of new members and assign roles
Enter email addresses at the top of the invitation screen. Select one or more roles to assign the users.
Click `Send invites`
Click `Send invites` at the bottom of the screen. Users will receive an email from which they can join the organization. For more information on accepting invitations, see [Manage my account](/products/cloud/guides/security/cloud-access-management/manage-my-account).
Add users via SAML identity provider
If your organization is configured for [SAML SSO](/products/cloud/guides/security/cloud-access-management/saml-sso-setup), follow these steps to add users to your organization.
1. Add users to your SAML application in your identity provider. The users won't appear in ClickHouse until they have logged in once.
2. When the user logs in to ClickHouse Cloud, they will automatically be assigned the default role selected in your SAML configuration.
3. Follow the instructions in the `Manage user role assignments` below to grant permissions
Enforcing SAML-only authentication
Once you have at least one SAML user in the organization assigned to the Admin role, remove users with other authentication methods from the organization to enforce SAML only authentication for the organization.
Manage user role assignments
Users assigned the Admin role may update permissions for other users at any time.
Access organization settings and select Users and roles
From the services page, select the name of your organization. Select the `Users and roles` menu item from the popup menu.
Select the user to update and select Edit
Select the menu item at the end of the row for the user that you wish to modify access for. Select `edit` from the popup menu.
Update permissions
Click in the `Roles` box to expand the menu. Select the check boxes to add or remove roles from the user. Refer to [Console roles and permissions](/products/cloud/reference/security/console-roles) for a listing of roles and associated permissions.
Save your changes
Save your changes with the `Save changes` button at the bottom of the tab.
Remove a user
**Remove SAML users**
SAML users that have been unassigned from the ClickHouse application in your identity provider aren't able to log in to ClickHouse Cloud. The account isn't removed from the console and will need to be manually removed.
Follow the steps below to remove a user.
1. Select the organization name in the lower left corner
2. Click `Users and roles`
3. Click the three dots next to the user's name and select `Remove`
4. Confirm the action by clicking the `Remove user` button