Skip to content

Manage existing Users

Managing and Removing Users

To manage users or remove users from the application:

  1. Navigate to the Dashboard and click on the "Manage Users" menu in the sidebar.
  2. This opens the Manage Users page, which lists all existing users and their associated organization-level roles in a paginated view.
  3. Use the Search form to quickly locate a specific user.
  4. From this view, you can:
  5. Edit the assigned roles of one or more users.
  6. Remove users from the application entirely.
  7. After making the necessary changes, click Save to update the user information.

Example Image: Manage Users Page
Screenshot of Manage Users Page

SSO Users and Role Management

When your organization uses Single Sign-On (SSO), Cloudpie manages some user attributes automatically to ensure consistency with your identity provider (IdP).

Role Assignment Rules

  • Initial Login (Auto-Provisioned Users):
    When a new user logs in through SSO for the first time:
  • The user account is automatically created in Cloudpie (if Auto-Provision is enabled).
  • The user receives any default organization roles defined in the SSO configuration.

  • If default roles are empty, the user is created without roles until assigned manually.

  • Group Mapping Enabled:
    When Group Mapping is turned on in SSO settings:

  • Each login will synchronize roles from the user’s SAML groups based on the configured group-to-role mapping.
  • Existing roles on the user will be overwritten by the mapped roles from the IdP.

  • Only valid and existing roles in Cloudpie are applied; invalid roles are ignored automatically.

  • Group Mapping Disabled:
    When Group Mapping is off:

  • Cloudpie does not modify the user’s roles during login.
  • Only SAML-related information (such as saml_groups and last_login) is updated.
  • Admins can still modify these users’ roles manually from the Manage Users page.

Manual Role Changes for SSO Users

  • Admins can assign, revoke, or modify roles for SSO users directly from Manage Users.
  • However, if Group Mapping is enabled, any manual role changes will be overwritten the next time that user logs in through SSO.
  • If Group Mapping is disabled, manual role edits will persist normally.

Removing SSO Users

  • SSO users can be removed from Cloudpie just like local users.
  • Upon re-login through SSO, a deleted user will be recreated only if Auto-Provisioning is enabled.
  • If auto-provisioning is disabled, deleted users will not be re-created automatically.

Summary

Scenario Role Update Behavior Manual Role Edits Persist?
Auto-Provision (first login) Roles assigned from defaults N/A
Group Mapping Enabled Roles synced from IdP group mapping ❌ Overwritten on next login
Group Mapping Disabled Roles not modified by SSO ✅ Persist
Deleted SSO User + Auto-Provision On Recreated automatically on next login N/A
Deleted SSO User + Auto-Provision Off Not recreated N/A