Manage users in IAM

The Identity & Access Management (IAM) page lists everyone who uses your TIR account. Invite people from it, choose their role and projects, change their access as their work changes, and remove them when they leave.

Before you begin

You need to be the Owner, an Admin, a Project Manager, or a Project Lead. Each of these roles can invite people. Only the Owner and Admins can change or remove a person on this page.

Open the IAM page

Open the account menu at the top right, the button that shows your name and email, and select Identity & Access Management (IAM). The Active users tab lists the people who accepted their invitation, and the Invited users tab lists every invitation with its status.

Add a user

You can give a person a role below your own:

Your role	Roles you can give
Owner	Admin, or a User with any project role
Admin	A User with any project role
Project Manager	A User who is a Project Lead or a Member
Project Lead	A User who is a Member

1. Select Add user.
2. In User email, enter the person’s email address.
3. Under Account role, choose ADMIN for someone who runs every project with you, or USER for everyone else. An Admin reaches every project, so the form asks for projects only for a USER.
4. For a USER, tick each project under Projects and choose a role in it under Project role: PROJECT MANAGER, PROJECT LEAD, or MEMBER. For MEMBER, choose one or more policies under Project policies. To make a policy first, see Create a policy. The form also has a link that opens Create policy for that project. Use Search projects to find a project in a long list. A project you leave unticked stays out of the person’s access.
5. Select Add user.

The person is listed under Invited users as Pending, and an invitation email goes to them. To compare the roles before you choose, see Roles and permissions.

What the invited person does

A person who is new to E2E:

1. Selects the link in the email and completes the registration form.
2. Signs in and switches to TIR by selecting TIR-AI Platform at the top of the dashboard.
3. Opens the account menu at the top right, selects Show my invitations, and selects Accept in the Invitations panel.

A person who already has an E2E account skips the registration and accepts the invitation under Show my invitations in the account menu. Your account then appears under Switch account in that menu, and a new account number for your account appears in their MyAccount.

When they accept, they move to Active users.

Send an invitation again

When a person has yet to accept, or the invitation shows Expired:

1. On Invited users, find the person.
2. In Actions, select Resend invitation, then Resend invitation again in the dialog.

A new link goes to them, and the status is Pending again. To withdraw an invitation instead, select Delete invitation, type the person’s email in Confirm deletion, and select Delete invitation.

Change a person’s access

1. On Active users, select Update access in the person’s Actions.
2. Change their role or their projects, then select Update user access.

Update access appears on people whose role is below yours. To change only one project’s members, a Project Manager or Project Lead uses the project’s Project Members tab; see Manage project members and policies.

Remove a person

Removing a person ends their access to every project in your account.

1. On Active users, select Delete user in the person’s Actions.
2. In Confirm deletion, type the person’s name, or their email when the list shows no name, and select Delete user.

The person and all their permissions are removed from TIR, and their MyAccount access stays as it is. SSH keys they attached to your resources stay on those resources, so remove the keys from each resource too.

What to do next

To see who did what in the account, view Audit Logs. If an invited person sees Access Restricted or a message when you add them, see Troubleshooting TIR Access Control.