Skip to main content
This article applies only to Self-Managed and Dedicated Cloud environments. The shared environment (Shared Cloud) is managed by Authlete and is out of scope for this document.
User Management lists every user in the environment, across every organization. It’s available to Environment Admins and Platform Admins only. For each user, the list shows the user’s name and email, an Environment Admin toggle, the organizations they belong to (the first two, plus a count of the rest), and a Delete column for removing them from the environment. Use the search box to find a user.

​
Granting and revoking Environment Admin

Environment Admins and Platform Admins can grant or revoke Environment Admin for other users by using the toggle in the Environment Admin column. Console asks you to confirm each change.
  • Grant Environment Admin. The user gets full access to User Management, Audit Logs, Session Management, and Environment Settings across every organization in the environment, including ones they don’t belong to. Environment Admin is self-service, so that user can then grant or revoke the role for anyone else, including you. Grant it only to someone you trust with full administrative control over the entire environment.
  • Revoke Environment Admin. The user immediately loses access to User Management, Audit Logs, Session Management, and Environment Settings. Their organization memberships and organization-level permissions are not affected.
The toggle is disabled in two cases:
  • For your own account. You can’t change your own Environment Admin status, so another Environment Admin or Platform Admin has to do it.
  • For Platform Admins, who already have full access.
Every grant or revocation is recorded in Audit Logs.

​
Removing a user from the environment

Select the remove icon in the Delete column, then confirm with “Remove User”. Console removes the user from every organization they belong to in this environment, and they immediately lose access to the associated services, clients, and data. This can’t be undone. To restore access, re-invite the user to each organization individually. You can’t remove yourself, and only a Platform Admin can remove a Platform Admin’s account.

​
Getting your first Environment Admin

How your first Environment Admin is set up depends on your deployment:
  • Dedicated Cloud: Authlete grants Environment Admin to your designated administrator(s) when your environment is provisioned.
  • Self-Managed: Your deployment has its own Platform Admin role, held by your internal platform team, with full administrative control over the deployment. A Platform Admin appoints the first Environment Admin(s) for the environment.
From there, it’s self-service, as described above.