> ## Documentation Index
> Fetch the complete documentation index at: https://docs.strata.io/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management

The Maverics Console supports multi-user organizations with role-based access. Organizations can have multiple owners and members. Users can belong to several organizations, switch between them, and manage membership through the Console interface.

## Organizations

Each user can own or be a member of multiple organizations. The Console provides two ways to navigate between them.

**Switching organizations** -- Use the org switcher in the top banner of the Console. It displays your current organization name and role badge (e.g., "Strata Identity OWNER"). Click it to switch between organizations you have access to.

**Viewing all organizations** -- Click your profile in the upper-right corner of the Console, then click **Organizations**. This page shows all organizations you own or are a member of, with the subtitle "View your organization memberships".

## Roles and Permissions

The Console uses two roles -- **Owner** and **Member** -- to control what actions a user can perform within an organization.

| Permission                   | Owner | Member |
| ---------------------------- | ----- | ------ |
| Configure identity fabrics   | Yes   | Yes    |
| Configure applications       | Yes   | Yes    |
| Configure service extensions | Yes   | Yes    |
| Manage members               | Yes   | No     |
| Manage SSO settings          | Yes   | No     |
| Delete the organization      | Yes   | No     |

<Note>
  Organizations can have multiple owners. Grant owner privileges when inviting a new member or by updating an existing member's role.
</Note>

## Inviting Members

<Steps>
  <Step title="Open your organizations">
    Click your profile in the upper-right corner of the Console, then click **Organizations**.
  </Step>

  <Step title="Select an organization">
    Click the organization you want to manage.
  </Step>

  <Step title="Invite a member">
    Click the **Invite** button.
  </Step>

  <Step title="Configure the invitation">
    Enter the email address of the person you want to invite. Optionally toggle **Grant Owner Privileges** to give the new member owner-level access. Owner privileges allow managing members, SSO settings, and deleting the organization. Click **Send Invite** to confirm.
  </Step>
</Steps>

<Note>
  Invited users receive an email notification. If they do not already have a Maverics Console login, they will be prompted to create one before accepting the invitation.
</Note>

## Accepting Invitations

When you receive an invitation, sign in to the Maverics Console -- or create a login if you do not have one. Click your profile in the upper-right corner, then click **Organizations**. The invitation appears in your organizations list. Click it to accept and gain access to the organization.

Once you accept an invitation, the organization appears in your org switcher and you can begin working with the organization's configuration immediately.

## Removing Members

Organization owners can remove members from an organization. Navigate to the organization's detail page by clicking your profile, then **Organizations**, and selecting the organization. Click the remove action next to the member you want to remove.

<Warning>
  Removing a member revokes their access to the organization immediately. Any in-progress work by that member is not affected, but they will no longer be able to view or modify the organization's configuration.
</Warning>

## Organization Settings

Each organization's detail page includes an **Organization Settings** card. Click the **Edit** button on this card to open the settings dialog.

* **Rename organization** -- Change the organization's display name.
* **Organization icon** -- Upload a custom icon (JPEG, PNG, or SVG, max 2 MB).
* **Enable SSO** -- Toggle to enable enterprise SSO for the organization. When enabled, an SSO Configuration section appears on the organization page. See [Single Sign-On (SSO)](/reference/console/sso) for setup instructions.
* **Delete organization** -- Permanently delete the organization and all its configuration.

<Warning>
  Deleting an organization is permanent and cannot be undone. All configuration, deployments, and member associations are removed.
</Warning>

## Related Pages

<CardGroup cols={2}>
  <Card title="Console Overview" icon="compass" href="/reference/console/overview">
    Console administration overview
  </Card>

  <Card title="Single Sign-On (SSO)" icon="key" href="/reference/console/sso">
    Configure enterprise SSO for Console login
  </Card>

  <Card title="Break-Glass Procedures" icon="triangle-exclamation" href="/reference/console/break-glass">
    Emergency procedures when the Console is inaccessible
  </Card>
</CardGroup>