Roles#
Every account in EJO has one of three roles:
| Role | What it can do |
|---|---|
| Viewer | Can look at everything, cannot change anything. |
| Developer | Everything a viewer can do, plus: start deploys, promotes and rollbacks; approve deployments in environments whose approver list is empty; edit and publish step packs; pin, extend and tear down previews; create the ready-made supply chain pipeline. |
| Admin | Everything a developer can do, plus: manage users and groups; organization settings, SCM connections (Settings > GitHub App and Settings > Webhooks), the security policy, secret stores and pipeline identity; withdraw step pack versions; registration tokens and manifests for installing agents. |
Prerequisites#
- The admin role, to add users and change roles.
Add a user#
- Open Platform > Users.
- In the Add user form, enter:
- Username: letters, numbers, dot, underscore and hyphen. It can also be an e-mail address, for example
jane@acme.com. - Password: at least 12 characters.
- Role: Admin, Developer or Viewer.
- Username: letters, numbers, dot, underscore and hyphen. It can also be an e-mail address, for example
- The user can sign in with the password you set and change it on the Account page.
Tip: If the user will sign in with Google or GitHub, enter that account's verified e-mail address as the username. See Google and GitHub sign-in.
Manage users#
On the Users page, for each user you can:
- Change their role.
- Set a new password with Set password.
- Disable the account with Disable and enable it again with Enable. A disabled account cannot sign in by any method.
- Reset the 2FA of a user who lost their phone with Reset 2FA. See Two-factor authentication.
- Remove the user with Remove from EJO.
Groups#
Use Create group to create a group with a Group name and a role, and Add member to add users to it. Groups can also be service owners, for example owner: group:team-web in a .ejo file. See The .ejo file.
Number of users#
The number of users in an organization is limited by your plan: 4 users on Community, 25 on Team. When the limit is reached, no new users can be added. See Plans and billing.
Audit log#
Adding users, role changes, 2FA resets and other important actions are written to Platform > Audit log. Only admins can see this page.