Team Access

User Management

Add team members, assign roles, and manage access to your Costif.ai organization.

Available Roles

Costif.ai uses role-based access control (RBAC) to manage permissions. Each user is assigned one role that determines their access level.

Admin

Complete control over all features including billing, users, agents, and organization settings.

User Admin

Can add, edit, and remove users. Ideal for HR or team leads who manage team access.

Agent Admin

Can deploy, configure, and manage agents. Perfect for IT administrators handling deployments.

Read Only

View-only access to dashboards and reports. Cannot make changes. Good for stakeholders and auditors.

1

Navigate to User Management

Access the users page from the portal

1

Log into your Portal

Go to portal.costif.ai and sign in with your admin account

2

Open Settings

Click the Settings icon in the left sidebar

3

Select Users

Click on Users in the settings menu to see your team members

Permissions Required

You need Admin or User Admin role to add or modify users.

2

Add a New User

Invite a team member to your organization

1

Click "Add User"

Click the + Add User button in the top right corner of the Users page

2

Enter User Details

Fill in the required information:

  • Email - The user's email address (required)
  • Full Name - The user's display name (required)
  • Role - Select their access level (required)
  • Password - Optional. If not set, an invitation email will be sent
3

Select a Role

Choose the appropriate role based on what the user needs to do:

Admin - Full access
User Admin - Manage team
Agent Admin - Deploy agents
Read Only - View only
4

Click "Create User"

The user will be added to your organization immediately. If no password was set, they'll receive an email to set one.

Or create users via the API:

POST /api/v1/users
curl -X POST "https://api.costif.ai/api/v1/users" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"email": "user@example.com", "full_name": "John Doe", "role": "read_only"}'
3

Update a User

Change roles or user information

1

Find the User

On the Users page, locate the user you want to update in the list

2

Click Edit

Click the Edit button or the user's row to open their profile

3

Make Changes

You can update:

  • Full Name - Update display name
  • Role - Change access level (Admin only)
  • Active Status - Enable or disable account
4

Save Changes

Click Save to apply the updates

Important Notes

  • Users can update their own name but not their role
  • Only Admin or User Admin can change other users' roles
  • You cannot remove the last Admin from an organization
  • You cannot deactivate your own account
4

Deactivate a User

Remove access without deleting the account

Deactivating a user removes their ability to log in while preserving their activity history and audit trail.

1

Navigate to the User

Go to Settings, then Users, and find the user to deactivate

2

Open User Settings

Click on the user to open their profile

3

Toggle Active Status

Switch the Active toggle to off, or click Deactivate User

Deactivated Users

  • Cannot log in
  • History is preserved
  • Can be reactivated anytime
  • Appears in user list (grayed out)

When to Deactivate

  • Employee leaves the company
  • Temporary access suspension
  • Role changes require new account
  • Security concerns

Best Practices

Principle of Least Privilege

Assign the minimum role needed. Start with Read Only and upgrade as needed.

Multiple Admins

Always have at least two Admin users to prevent lockout situations.

Regular Audits

Review user access periodically. Deactivate users who no longer need access.

Prompt Offboarding

Deactivate users immediately when they leave the organization.

Need Help?

Having trouble managing users? We're here to help.