Skip to Content
AdminUsers and Roles

Users and Roles

User management controls who can access your Nairo workspace and what administrative capabilities they have.

What user management covers

Customer administrators can:

  • View workspace members
  • Search and filter the member list
  • See pending invitations
  • Invite new users
  • Change a member’s role

Access to user management requires the auth:user_management permission. The route is protected and only visible to users with this permission.

How user management works

Member list

The users tab shows all members in the workspace with search, role filter, sort and pagination. Pending invitations are shown separately so administrators can track who has not yet accepted.

Inviting users

Administrators invite users by email through the invite modal. Invited users receive an invitation to join the workspace organisation.

Changing roles

Administrators can change a member’s role through the change role modal. Roles determine administrative capabilities within the workspace.

Authentication

Each workspace maps to an organisation for authentication. When a user navigates to a workspace URL, Nairo activates the corresponding organisation. If the user’s organisation does not match the workspace, they are signed out to prevent cross-workspace access.

Roles today

The permission model is evolving. Currently:

  • Organisation administrators receive administrative permissions including user management
  • Members access product surfaces (Assistant, Projects, Experts, Actions, Insight Table, Library) but not administrative pages in the current implementation

A read-only Roles tab exists in the user management interface showing the platform role catalog, but the tab navigation is currently disabled in the UI.

What user management is not

User management does not configure product-level permissions for individual features (for example, which reviews a user can see). Library sharing uses a separate sharing model with role-based access per document or folder.

Platform-level tenant administration is a separate surface for platform operators, not customer workspace administrators.

Getting started

Confirm which team members should have administrator access. Invite pilot users with member roles first, then promote team leads to administrator if they need to manage invitations.

Workspace SetupPermissions