User Management
User Management allows administrators to invite, manage, and remove users within an organization. It covers user roles, group assignments, and identity provider integration.
Services Behind This Feature
| Service | Role |
|---|---|
| BFF API | Handles user management API requests from the Cogrion UI. |
| Keycloak | The identity and access management service. Stores users, groups, and role assignments. |
| Ranger | Downstream consumer of role assignments. Keycloak realm roles are synced into Ranger roles every 15 minutes (configurable), making data access policies take effect automatically when roles are assigned. |
Go Deeper
- Authentication and Authorization in the Cogrion UI — how user sessions and tokens work
- Keycloak → Ranger Role Sync — how role assignments propagate to data access policies
- Keycloak — core platform identity service reference