Manage Users in Your Organization
Users are synchronized from your identity provider to ONE. This guide covers how to manage users once they’re in the system, including granting access and removing users.
Before you start
-
You need to be an environment admin (specifically, with the
organizationconfig-adminrole). See Environment admins. -
Familiarize yourself with Identity Provider Roles.
How users are added to ONE
Users are loaded from your identity provider. You cannot create users directly in ONE.
When a new user logs in to ONE for the first time, their account and identity provider roles are automatically synchronized.
To add new users to your organization:
-
Create the user in your identity provider.
-
Have the user log in to ONE. Their account is now ready for use.
Grant access to platform features
Some platform features require specific identity provider roles.
For example, accessing the AI Agent requires the agent-user role.
To assign a feature-related role to a user:
-
Go to Global Settings > User management > Users.
To access Global settings, select the Ataccama logo. -
Find and select a user to open their details.
-
In Roles, select Assign roles and choose the required role.
-
Select Assign to confirm. The role is assigned and synchronization starts automatically.
For more information, see Identity Provider Roles.
Add users to groups
To work with data assets, users need to belong to at least one group. Adding a user to a group means assigning them to a governance role within that group.
Remove users
When a user is deleted from your identity provider, they can no longer log in to ONE. However, their account remains in ONE to preserve activity history and audit trails.
| Before deleting, consider whether you need to reassign any assets or group memberships the user had. |
To remove a user from ONE entirely:
-
Go to Global Settings > User management > Users.
-
Find and select the user.
-
In the three dots menu, select Delete and confirm your choice.
Next steps
-
Assign Stewardship — Make a group responsible for assets.
-
Share an Asset — Give users access to specific assets.
Was this page useful?