> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.fabricgateway.ai/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.fabricgateway.ai/_mcp/server.

# Manage users, roles, and credentials

**Administration** is where you manage who has access to your Fabric Gateway tenant and what credentials the gateway can use on your behalf. Use this section to add or remove users, change roles, invite new team members, store upstream credentials, and review administrative activity.

## Understanding Administration

| Section         | What it's for                                                                                                                    |
| --------------- | -------------------------------------------------------------------------------------------------------------------------------- |
| **Users**       | Identities provisioned into your tenant (for example, through an identity provider like Okta), along with their role and status. |
| **Invites**     | Invitations that have been sent but not yet accepted.                                                                            |
| **Credentials** | Upstream credentials the gateway can broker on behalf of connected services, such as an imported REST API.                       |
| **Audit logs**  | A record of administrative activity in your tenant.                                                                              |

Larger tenants may also expose:

| Section                | Where          | What it's for                                                              |
| ---------------------- | -------------- | -------------------------------------------------------------------------- |
| **Gateway health**     | Observability  | Health status for the data plane.                                          |
| **General settings**   | Administration | Tenant-wide configuration.                                                 |
| **Identity providers** | Administration | Configuration for how users are provisioned into the tenant.               |
| **Vaults**             | Administration | Where your own secrets are stored, so values never leave your environment. |

## View and manage users

To view users, do the following:

1. In the sidebar, select **Users** under **Administration**.

The users table shows **User**, **Role** (for example, **Member** or **Super admin**), **Status**, **External ID**, and **Last login**.

### Edit a user's role

To edit a user's role, do the following:

1. In the sidebar, select **Users** under **Administration**.
2. Next to the user, open the actions menu and select **Edit role**.
3. Select a new **Role** from the dropdown.
4. Click **Save**.

A role change takes effect the next time that user signs in. The user's current session keeps its existing permissions until it expires.

## Invite a user

To invite a user, do the following:

1. In the sidebar, select **Invites** under **Administration**.
2. Click **Invite**.
3. Enter the invitee's email address and select a role, then send the invite.

Pending invitations appear in the **Invites** table with their **Email**, **Role**, and **Sent** date until they're accepted.

## Manage credentials

**Credentials**, under **Administration**, stores the upstream credentials the gateway uses to broker auth on your behalf — for example, a credential added here lets the gateway authenticate to an imported REST API instead of passing each caller's own credentials through. For the import workflow this supports, see [Manage gateway connections and routes](/fabric/gateways/).

## Review audit logs

**Audit logs**, under **Administration**, records administrative activity in your tenant, such as role changes and invitations.

## Sign in to Fabric Gateway

To sign in, do the following:

1. Go to your tenant's sign-in page.
2. Enter your email address.
3. Select **Continue with email**.

If you don't have an account yet, select **Sign up** from the sign-in page instead.

## Next steps

* To connect your first provider before inviting your team, see the [Quickstart](/get-started/quickstart/).
* To control what a given role or consumer can do once they have access, see [Control and transform gateway traffic with plugins](/fabric/plugins/).