Getting Started
User Management
Invite users to your Nuxari workspace, assign roles, deactivate accounts, and manage user profiles.
Last updated: June 2026
Who this is for
Workspace owners and admins responsible for managing who can access the Nuxari platform and what they are allowed to do.
Before you start
You need the Admin or Owner role to invite, modify, or deactivate users. SeeWorkspaces and Roles for the full permissions reference.
How to invite a user
- 1In Nuxari, go to Settings > Users.
- 2Click Invite User.
- 3Enter the user's email address and select their role.
- 4Click Send Invitation. The user receives an email with a link to set up their account.
- 5Once the user accepts the invitation, their account becomes active in the workspace.
If your organization uses an identity provider (SSO), users can be provisioned automatically through your IdP integration instead of manual invitation. SeeIntegrations.
Roles you can assign
- ·Owner: Full platform access. Can manage billing, workspace settings, and all users. There can be more than one owner.
- ·Admin: Can manage users, roles, connectors, workflows, and settings. Cannot manage billing.
- ·Approver: Can review and authorize access requests, remediation plans, and onboarding/offboarding workflows.
- ·Requester: Can submit access requests and onboarding workflows. Cannot approve or manage other users.
- ·Auditor: Read-only access to audit logs, evidence, findings, and reports. Cannot submit or approve requests.
- ·Read-only: Can view permitted data. Cannot take any action that changes state.
How to change a user's role
- 1In Nuxari, go to Settings > Users.
- 2Find the user you want to update and click their name.
- 3In the user detail panel, click Edit Role.
- 4Select the new role and confirm. The change takes effect immediately.
- 5An audit event is generated recording who changed the role, to what, and when.
How to deactivate a user
Deactivating a user removes their ability to log in without deleting their history or audit record. This is the recommended approach when a user leaves the organization.
- 1In Nuxari, go to Settings > Users.
- 2Find the user and click their name.
- 3Click Deactivate User and confirm.
- 4The user's session is invalidated immediately and they cannot log in.
- 5All audit events and records associated with the user are preserved.
Deactivating a user does not automatically revoke their access in connected external systems. If the user had provisioned access (Microsoft 365, Okta, etc.), use the Offboarding workflow to revoke external access through the approval-gated pipeline.