Skip to navigation

Manage users and invitations

You manage who can access your Fabric AI Gateway organization from the Admin section of the sidebar. This topic shows you how to review the users in your organization, invite people, check pending invitations, and change a user’s role.

Prerequisites

Before you begin, make sure you have the following:

  • A Super admin role in a Fabric AI Gateway organization. Members don’t see Admin.
  • The email address of each person you want to invite.

Understand roles and how people join

Every user has a role, which appears in the Role column on the Members tab. There are two roles:

RoleWhat the user sees
Super adminEverything. The role appears with a highlighted badge, so you can spot administrators in a long list.
MemberThe Gateway items (read access to LLMs, MCP servers, Services, and Plugins), Members, and Credentials. Members don’t see Admin, which includes Analytics and Traces.

You can assign Member only on enterprise tenants. On a cloud tenant, Postman hosts the data plane, and the Member option appears dimmed with the hint “Available on enterprise version”. Existing Members still appear in the lists.

Be deliberate about who has the Super admin role. Configuration changes on the gateway affect production traffic, and a mistake can break it.

People appear in your organization in two ways:

  • Your identity provider provisions identities and roles, for example through Okta, and the Members tab lists them. Single sign-on is available on enterprise tenants; see Understand cloud and enterprise tenants.
  • When you invite someone by email, they receive a join link. They appear on the Members tab after they accept the invitation.

View members

To review the users in your organization, do the following:

  1. In the sidebar, select Members & Invites. The Members tab opens.
  2. Review the list. The total appears above the table, for example 108 of 108 users.
  3. To find a specific person, enter a name or email address in Search members.
  4. To reload the list, select the refresh icon at the top right of the page.

The table includes the following columns:

ColumnWhat it shows
UserThe person’s name and email address.
RoleThe person’s role, either Super admin or Member.
StatusThe account status, such as active.
External IDThe identifier from the identity provider. The column shows a dash when there is no value.
Last loginThe person’s most recent sign-in. The column shows a dash when there is no value.
ActionsA row menu. Changing a role is the only action it offers.

Invite people

To invite someone to your organization, do the following:

  1. In the sidebar, select Members & Invites.
  2. Select Invite. The Invite people to this organisation dialog opens.
  3. In Enter email, enter the person’s email address.
  4. In Role, select Super admin. On enterprise tenants, you can also select Member.
  5. Select Send invite.

Send invite stays unavailable until you enter an email address.

The dialog explains what happens next: invitees receive an email with a join link, and they appear under Members after they accept.

Review pending invitations

To check which invitations are waiting for a response, select Members & Invites in the sidebar, and then select the Invites tab. The tab lists invitations that you have sent and that people haven’t yet accepted. The table includes the following columns:

ColumnWhat it shows
EmailThe address the invitation was sent to.
RoleThe role the person receives when they accept.
SentHow long ago you sent the invitation, for example 4d ago.
ActionsA row menu for actions on that invitation.

To find an invitation, enter text in Search invites (the search box on the Invites tab). The total appears above the table, for example 1 of 1 invites. Select the refresh icon to reload the list.

Change a user’s role

To change a user’s role, do the following:

  1. In the sidebar, select Members & Invites.
  2. On the Members tab, find the user. Use Search members if the list is long.
  3. Next to the user, open the actions menu, and then select Edit role.
  4. In Role, select Super admin or Member.
  5. Select Save.

A role change takes effect the next time the user signs in. The user’s current session keeps its existing permissions until it expires.

Next steps