> ## Documentation Index
> Fetch the complete documentation index at: https://docs.userpilot.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Managing your team in Userpilot
> Manage teammates in Userpilot by inviting users, assigning roles and permissions, tracking activity, and securing access with authentication controls.
### Overview
You can manage who has access to your Userpilot workspace by inviting your colleagues and assigning them roles with the right permissions. This gives you flexibility in defining each person’s responsibilities. Userpilot provides predefined roles such as Admin, Account Owner, Publisher, and Analyst, and you can also create custom roles to tailor permissions exactly to your team’s needs.
You can also review [access and activity logs](/configure/team-and-roles/access-and-activity-logs) to monitor who has logged in and what actions they have taken, ensuring everything remains secure and well-tracked. From the **Authentication** tab, you can also enable [2FA](/configure/team-and-roles/2fa), [SSO login](/configure/team-and-roles/sso), [Just-in-Time provisioning](/configure/team-and-roles/jit), and [SCIM directory sync](/configure/team-and-roles/scim) for enhanced security and automated user management.
Custom roles, access logs, activity logs, and advanced authentication options are only available on the Enterprise plan. If you’re on a lower plan, you’ll need to [upgrade](https://userpilot.com/pricing/) to access these features.
### Teammates
The **Team** tab in Userpilot allows you to control who has access to your workspace, assign the right permissions, and keep track of activity. Whether you're collaborating with product managers, designers, analysts, or engineers, this section helps you manage roles and maintain workspace security with ease.
* **Filters and role tags** - At the top, you will find role-based filters that help you quickly sort teammates by their responsibilities or permission levels.
* **Search** - Use the search bar to find teammates instantly by typing their name or email.
* **User List** - This section shows all workspace members, and you can easily update their roles or manage their permissions directly from here.
If a teammate hasn’t accepted their invitation yet, Userpilot will show a red clock icon beside their name. You can resend the invitation to keep your workspace setup on track.
### Adding teammates
There are three ways to add people to your workspace:
* **Invite individually** - Click **Invite Teammates**, enter the email, and choose a role and application.
* **[Bulk import via CSV](/configure/team-and-roles/csv-import)** - Upload a CSV to invite many teammates at once, with a role per application.
* **Automated provisioning** - On the Enterprise plan, let your identity provider manage teammates with [SCIM directory sync](/configure/team-and-roles/scim), or create them automatically on first SSO login with [JIT provisioning](/configure/team-and-roles/jit).
Whenever SCIM directory sync is active - in every role-management mode, not only when the IdP owns roles - inviting and importing teammates directly in Userpilot is disabled, and membership comes from your IdP. It is also paused while a directory sync is in progress.
### Roles
By default, Userpilot offers four predefined roles:
| **Role** | **Description** | **Access level** |
| :---------------- | :----------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------------ |
| **Account Owner** | Automatically assigned to the first user who creates the workspace | Full access to everything, including billing and authentication settings |
| **Admin** | Day-to-day administration without account-level controls | Everything except billing, authentication settings (MFA, SSO, and SCIM), and assigning the Account Owner role |
| **Publisher** | Focused on content creation and publishing | Creates and publishes content, and manages users, companies, segments, events, and themes |
| **Analyst** | Works with analytics and reporting | Access to reports, session replay and playlists, and feature, page, and mobile screen tagging |
If SCIM is connected, roles are assigned automatically based on your identity provider’s group mappings and can’t be changed from the Userpilot UI. To update a teammate’s role, make the change in your IdP instead.
#### Custom Roles
You can also create **Custom Roles** (Enterprise plan only) if you need more control.\
Just click **+ Add Role**, then choose exactly which permissions to enable or restrict.
If you want to view or edit the permissions for a specific role, simply click on the role and then select View.
Userpilot’s premade roles (Account Owner, Admin, Publisher, and Analyst) can’t be edited. If you need different permissions, create a Custom Role instead, since custom roles can be edited at any time.
### How roles work with automated provisioning
When teammates are created automatically, their role comes from one of three settings, depending on how they arrive:
* **JIT default role.** A teammate created on their first SSO login gets the [JIT default role](/configure/team-and-roles/jit) you chose on the Authentication page. This is a starting point: a later SCIM sync can replace it with a mapped role.
* **SCIM group mapping.** With [SCIM](/configure/team-and-roles/scim) enabled, teammates get the role mapped to their IdP group. A teammate in several mapped groups gets the highest-privilege role among them.
* **SCIM default role.** Teammates who belong to no mapped group follow the **Individuals** row in your group mapping. Pick a role there to provision them, or choose Skip to leave them out of Userpilot.
Roles assigned by a group mapping take precedence over both defaults. Whether a role you change by hand survives the next sync depends on your [role management mode](/configure/team-and-roles/scim#choosing-who-owns-roles): in the recommended hybrid setup, manual changes are kept; with strict IdP enforcement, every sync resets roles to match your IdP.
[For any questions or concerns please reach out to **support@userpilot.com**](mailto:support@userpilot.com)