User Management

Manage users, roles, and access across your Twig AI organization.

Overview

User management in Twig AI allows you to:

• Add and remove users

• Assign roles and permissions

• Organize users into groups

• Monitor user activity

• Control resource access

Adding Users

Individual User Creation

1. Navigate to Administration → Users

2. Click Invite User

3. Enter details:

   • Email: [email protected] (required)

   • Name: Full name (optional)

   • Role: User, Manager, Admin, or Super Admin

   • Groups: Assign to groups (optional)

4. Click Send Invitation

5. User receives email with setup link

Bulk User Import

1. Administration → Users → Import Users

2. Download CSV template

3. Fill in user information:

Email,Name,Role,Groups,Status
[email protected],John Doe,MANAGER,"Support Team|Tier 2",ACTIVE
[email protected],Jane Smith,USER,"Support Team",ACTIVE

1. Upload CSV

2. Review preview

3. Confirm import

SSO Auto-Provisioning

Enable Just-In-Time (JIT) provisioning:

1. Administration → SSO → Auto-Provisioning

2. Enable JIT provisioning

3. Configure:

   • Default role: User

   • Attribute mapping (email, name, groups)

   • Auto-create groups: Yes/No

4. Users created automatically on first SSO login

User Roles

See User Permissions & Roles for complete details.

Quick Reference:

Role	Can Create Agents	Can Edit All Agents	Can Manage Users	Can View All Analytics
Super Admin	✅	✅	✅	✅
Admin	✅	✅	✅	✅
Manager	✅	Own only	Group only	Group only
User	❌	❌	❌	Self only

Managing Users

Viewing Users

User List shows:

• Name and email

• Role

• Groups

• Last login

• Status (Active/Inactive)

• Actions

Filters:

• By role

• By group

• By status

• By last login date

Editing Users

1. Click on user

2. Modify:

   • Name

   • Role

   • Groups

   • Status

3. Save changes

4. User notified (optional)

Changing Roles

1. Select user

2. Click Change Role

3. Select new role

4. Confirm impact warning

5. Save

Effect: Immediate permission changes

Deactivating Users

Temporary deactivation:

1. Select user

2. Click Deactivate

3. Confirm

Effects:

• Cannot log in

• API keys disabled

• Removed from groups temporarily

• Data preserved

Reactivation:

1. Select deactivated user

2. Click Activate

3. Restore group memberships

Deleting Users

⚠️ Permanent action

1. Select user

2. Click Delete

3. Choose deletion mode:

   • Soft Delete: Hide user, keep data

   • Hard Delete: Remove completely

4. Confirm with admin password

5. User removed

Group Assignment

Adding to Groups

Individual:

1. Open user profile

2. Go to Groups tab

3. Click Add to Group

4. Select group(s)

5. Save

Bulk:

1. Select multiple users

2. Bulk Actions → Add to Group

3. Select group

4. Confirm

Removing from Groups

1. Open user profile

2. Groups tab

3. Click X next to group name

4. Confirm removal

User Activity Monitoring

Activity Dashboard

User: [email protected]
├─ Last Login: 2 hours ago
├─ Queries (24h): 45
├─ Most Used Agent: Support Agent
├─ Avg Response Time: 1.8s
├─ Failed Auth: 0
└─ Status: Active ✅

Activity Logs

Track user actions:

• Logins and logouts

• Agents used

• Queries asked

• Resources accessed

• Configuration changes

• Failed attempts

Anomaly Detection

Auto-alert on:

• Login from new location

• Unusual query volume

• Failed auth attempts (5+)

• Access to sensitive resources

• Off-hours activity (configurable)

Best Practices

1. Onboarding

✅ Standard onboarding checklist ✅ Role assignment based on job function ✅ Group assignment from day 1 ✅ Security training required ❌ Don't grant broad access initially

2. Offboarding

✅ Deactivate immediately on departure ✅ Remove from all groups ✅ Revoke API keys ✅ Transfer ownership of resources ✅ Export user data if needed ❌ Don't delay deactivation

3. Regular Reviews

✅ Quarterly access review ✅ Remove inactive users (90+ days) ✅ Verify role appropriateness ✅ Update group memberships ❌ Don't let permissions accumulate

4. Principle of Least Privilege

✅ Start with User role ✅ Escalate only when needed ✅ Time-limit elevated access ✅ Document justification ❌ Don't make everyone Manager/Admin

Troubleshooting

User Can't Login

Check:

1. Account is active

2. Correct email/password

3. MFA code valid

4. No account lockout

5. SSO configured properly

User Missing Permissions

Check:

1. Correct role assigned

2. Part of appropriate groups

3. Permissions haven't been revoked

4. Session refreshed (logout/login)

Bulk Import Failed

Check:

1. CSV format correct

2. No duplicate emails

3. Valid role names

4. Groups exist

5. Check error log for details

Next Steps

• User Permissions & Roles - Permission details

• Group Management - Organize users

• Agent Permissions - Control agent access

• SSO Integration - Enterprise auth