Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Team & access

Team & access

How do I add a new user to my workspace?

Quick answer

A workspace admin adds users in Administration, under Users. The account can be local or single sign-on, and you give it a role such as Developer. The Activity feed then records a Create or Invite entry for the new user. You need the user:manage permission.

Steps

  1. Use an account that holds the user:manage permission, such as a SuperAdmin. If you see no Administration item in the sidebar, you do not have it. See why Administration is missing.
  2. Click Administration, then open Users, where your workspace's accounts are managed.
  3. Start a new user with the add control on that page.
  4. Enter the person's name and email, then choose whether the account is local or comes from single sign-on, which depends on how your company signs in.
  5. Pick a role: Developer is built in, and any custom role your admins made is also on offer.
  6. Save the form, and tell the new person which address to use, because they sign in with the account type you chose for them.
  7. Open Activity. Search for the person's name to see the entry.

The Administration screens were not part of the pages we reviewed. Button names may differ a little from the words used here.

Good to know

The API does the same job. A call to POST /api/users creates a user, either local or single sign-on, and it needs the user:manage permission to work.

Activity entryWhat it tells you
Create · UserShows the user, the roles given and the account source, such as local
Invite · UserShows whether an email went out (Emailed true or false)
Update · UserShows roles added later
  • Your plan caps how many users a workspace can hold. Look at Settings → Plan & usage.
  • Choose the narrowest role that lets the person work, which is least privilege in practice and keeps later reviews short.
  • A teammate who cannot be picked as an assignee may lack the right permissions. See that fix.

Next, read how to create a custom role or how to remove a user.

Full tutorial

Cyberlop API tokens and permissions: how to issue and limit them

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.