> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.fabricgateway.ai/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.fabricgateway.ai/_mcp/server.

# Manage users and invitations

> Review users, invite people, check pending invitations, and change a user's role.

You manage who can access your Fabric AI Gateway organization from the **Admin** section of the sidebar. This topic shows you how to review the users in your organization, invite people, check pending invitations, and change a user's role.

## Prerequisites

Before you begin, make sure you have the following:

* A **Super admin** role in a Fabric AI Gateway organization. Members don't see **Admin**.
* The email address of each person you want to invite.

## Understand roles and how people join

Every user has a role, which appears in the **Role** column on the **Members** tab. There are two roles:

| Role            | What the user sees                                                                                                                                                                                           |
| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Super admin** | Everything. The role appears with a highlighted badge, so you can spot administrators in a long list.                                                                                                        |
| **Member**      | The **Gateway** items (read access to **LLMs**, **MCP servers**, **Services**, and **Plugins**), **Members**, and **Credentials**. Members don't see **Admin**, which includes **Analytics** and **Traces**. |

You can assign **Member** only on enterprise tenants. On a cloud tenant, Postman hosts the data plane, and the **Member** option appears dimmed with the hint "Available on enterprise version". Existing Members still appear in the lists.

Be deliberate about who has the **Super admin** role. Configuration changes on the gateway affect production traffic, and a mistake can break it.

People appear in your organization in two ways:

* Your identity provider provisions identities and roles, for example through Okta, and the **Members** tab lists them. Single sign-on is available on enterprise tenants; see [Understand cloud and enterprise tenants](/fabric/administration#understand-cloud-and-enterprise-tenants).
* When you invite someone by email, they receive a join link. They appear on the **Members** tab after they accept the invitation.

## View members

To review the users in your organization, do the following:

1. In the sidebar, select **Members & Invites**. The **Members** tab opens.
2. Review the list. The total appears above the table, for example **108 of 108 users**.
3. To find a specific person, enter a name or email address in **Search members**.
4. To reload the list, select the refresh icon at the top right of the page.

The table includes the following columns:

| Column          | What it shows                                                                              |
| --------------- | ------------------------------------------------------------------------------------------ |
| **User**        | The person's name and email address.                                                       |
| **Role**        | The person's role, either **Super admin** or **Member**.                                   |
| **Status**      | The account status, such as `active`.                                                      |
| **External ID** | The identifier from the identity provider. The column shows a dash when there is no value. |
| **Last login**  | The person's most recent sign-in. The column shows a dash when there is no value.          |
| **Actions**     | A row menu. Changing a role is the only action it offers.                                  |

## Invite people

To invite someone to your organization, do the following:

1. In the sidebar, select **Members & Invites**.
2. Select **Invite**. The **Invite people to this organisation** dialog opens.
3. In **Enter email**, enter the person's email address.
4. In **Role**, select **Super admin**. On enterprise tenants, you can also select **Member**.
5. Select **Send invite**.

> **Note**
>
> **Send invite** stays unavailable until you enter an email address.

The dialog explains what happens next: invitees receive an email with a join link, and they appear under **Members** after they accept.

## Review pending invitations

To check which invitations are waiting for a response, select **Members & Invites** in the sidebar, and then select the **Invites** tab. The tab lists invitations that you have sent and that people haven't yet accepted. The table includes the following columns:

| Column      | What it shows                                               |
| ----------- | ----------------------------------------------------------- |
| **Email**   | The address the invitation was sent to.                     |
| **Role**    | The role the person receives when they accept.              |
| **Sent**    | How long ago you sent the invitation, for example `4d ago`. |
| **Actions** | A row menu for actions on that invitation.                  |

To find an invitation, enter text in **Search invites** (the search box on the **Invites** tab). The total appears above the table, for example **1 of 1 invites**. Select the refresh icon to reload the list.

## Change a user's role

To change a user's role, do the following:

1. In the sidebar, select **Members & Invites**.
2. On the **Members** tab, find the user. Use **Search members** if the list is long.
3. Next to the user, open the actions menu, and then select **Edit role**.
4. In **Role**, select **Super admin** or **Member**.
5. Select **Save**.

> **Note**
>
> A role change takes effect the next time the user signs in. The user's current session keeps its existing permissions until it expires.

## Next steps

* To review what your users do, see [Review audit logs](/fabric/administration#review-audit-logs).
* To manage the credentials that the gateway uses, see [Manage credentials and vaults](/fabric/administration/credentials).