> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siftstack.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management settings

> Settings, options, and behaviors for User Management in Sift.

export const MintTable = ({columns = [], rows = [], columnWidths = []}) => {
  const pushTextWithLineBreaks = (parts, text, keyBase) => {
    const segments = String(text).split(/\\n|\n/);
    segments.forEach((segment, idx) => {
      if (segment) {
        parts.push(<span key={`${keyBase}-text-${idx}`}>{segment}</span>);
      }
      if (idx < segments.length - 1) {
        parts.push(<br key={`${keyBase}-br-${idx}`} />);
      }
    });
  };
  const parseMarkdown = text => {
    if (text === null || text === undefined) return "";
    const str = String(text);
    const parts = [];
    let lastIndex = 0;
    const pattern = /(`[^`]+`|\*\*[^*]+\*\*|\*[^*]+\*|\[([^\]]+)\]\(([^)]+)\))/g;
    let match;
    while (true) {
      match = pattern.exec(str);
      if (match === null) {
        break;
      }
      if (match.index > lastIndex) {
        pushTextWithLineBreaks(parts, str.substring(lastIndex, match.index), `before-${lastIndex}`);
      }
      const fullMatch = match[0];
      if (fullMatch.startsWith("`") && fullMatch.endsWith("`")) {
        parts.push(<code key={match.index}>{fullMatch.slice(1, -1)}</code>);
      } else if (fullMatch.startsWith("**") && fullMatch.endsWith("**")) {
        parts.push(<strong key={match.index}>{fullMatch.slice(2, -2)}</strong>);
      } else if (fullMatch.startsWith("*") && fullMatch.endsWith("*")) {
        parts.push(<em key={match.index}>{fullMatch.slice(1, -1)}</em>);
      } else if (fullMatch.startsWith("[")) {
        const linkText = match[2];
        const linkUrl = match[3];
        parts.push(<a key={match.index} href={linkUrl} className="text-black-600 dark:text-black-400">
            {linkText}
          </a>);
      }
      lastIndex = pattern.lastIndex;
    }
    if (lastIndex < str.length) {
      pushTextWithLineBreaks(parts, str.substring(lastIndex), `tail-${lastIndex}`);
    }
    if (parts.length > 0) {
      return parts;
    }
    const plainParts = [];
    pushTextWithLineBreaks(plainParts, str, "plain");
    return plainParts.length ? plainParts : str;
  };
  const safeColumns = Array.isArray(columns) ? columns : [];
  const safeRows = Array.isArray(rows) ? rows : [];
  const safeColumnWidths = Array.isArray(columnWidths) ? columnWidths : [];
  const hasColumnWidths = safeColumnWidths.some(w => w !== null && w !== undefined && w !== "");
  const toCssWidth = width => typeof width === "number" ? `${width}px` : String(width);
  const getColumnStyle = idx => {
    const rawWidth = safeColumnWidths[idx];
    if (rawWidth === null || rawWidth === undefined || rawWidth === "") {
      return undefined;
    }
    const width = toCssWidth(rawWidth);
    return {
      width,
      minWidth: width
    };
  };
  const containerStyle = hasColumnWidths ? undefined : {
    overflowX: "auto"
  };
  const tableStyle = hasColumnWidths ? {
    tableLayout: "fixed",
    width: "100%"
  } : {
    width: "max-content",
    minWidth: "100%"
  };
  if (!Array.isArray(columns) || !Array.isArray(rows) || !Array.isArray(columnWidths)) {
    console.warn("MintTable received invalid props:", {
      columns,
      rows,
      columnWidths
    });
  }
  if (!safeColumns.length && !safeRows.length) {
    return null;
  }
  return <div className="mint-table-container" style={containerStyle}>
      <table style={tableStyle}>
        {hasColumnWidths && <colgroup>
            {safeColumns.map((_, idx) => {
    const style = getColumnStyle(idx);
    return <col key={idx} style={style} />;
  })}
          </colgroup>}
        <thead>
          <tr>
            {safeColumns.map((col, idx) => <th key={idx} className="text-left" style={getColumnStyle(idx)}>
                <b>{parseMarkdown(col)}</b>
              </th>)}
          </tr>
        </thead>
        <tbody>
          {safeRows.map((row, rIdx) => {
    const safeRow = Array.isArray(row) ? row : [];
    return <tr key={rIdx}>
                {safeRow.map((cell, cIdx) => <td key={cIdx} style={getColumnStyle(cIdx)}>
                    {parseMarkdown(cell)}
                  </td>)}
              </tr>;
  })}
        </tbody>
      </table>
    </div>;
};

The User Management section provides tools for managing access to Sift within an organization. It contains three tabs: **Users**, **Groups**, and **Syncs**, which allow administrators to review users, assign permissions, control access to data, and audit Identity Provider sync history.

## Tabs

### Users

The **Users** tab lists all members of the organization.

<MintTable
  columns={['Attribute', 'Description']}
  columnWidths={['30%', '70%']}
  rows={[
['Automatic enrollment', "Users with email addresses matching the organization's domain are added during sign-up."],
['External invitations', 'Users outside the domain can be manually invited and assigned to groups.'],
['User status', 'Users may be active or deactivated. Deactivated users lose access to the system.'],
['Group membership', 'Each user can belong to one or more groups, which define their access and permissions.'],
['Group search', 'Group fields support multi-word matching, case sensitivity, and regular expressions.'],
]}
/>

### Groups

The **Groups** tab lists all user groups within the organization.

<MintTable
  columns={['Attribute', 'Description']}
  columnWidths={['30%', '70%']}
  rows={[
['Default assignment', 'Internal users are added to a default group automatically. External users are assigned to a specified group during invitation.'],
['Group limits', 'There is no restriction on the number of groups that can be created.'],
['Group attributes', 'Each group has a name, assigned users, role, Asset access, and optional default status.'],
['Group editing', 'Groups can be modified or deleted. Names, roles, users, and Assets are all editable.'],
['Asset access', 'Groups may be granted access to all Assets or to a defined subset.'],
]}
/>

#### Group roles

Each group is assigned one of the following roles, which determine the level of access granted to its members. For a full breakdown of permissions per role, see [Authorization models settings](/documentation/reference/manage/authorization-models-settings#roles).

<MintTable
  columns={['Role', 'Description']}
  columnWidths={['20%', '80%']}
  rows={[
['Admin', 'Full Data, Configuration, and User Management Permissions.'],
['Editor', 'Full Permissions to View/Edit/Write Data and Metadata.'],
['Collaborator', 'Permissions to View Data and Add Metadata.'],
['View Only', 'Permissions to View Data.'],
['Unspecified', 'No permissions.'],
]}
/>

### Syncs

The **Syncs** tab allows administrators to review historical Identity Provider syncs and audit user and group changes over time.

## Behavior

The following table describes known constraints and behaviors to be aware of when working with User Management in Sift.

<MintTable
  columns={['Limitation', 'Description']}
  columnWidths={['30%', '70%']}
  rows={[
['Deactivate a user', 'Only users with the Admin role can deactivate accounts. Deactivating a user account automatically deactivates all API keys created by that user.'],
['Reactivate a user', 'Only users with the Admin role can reactivate accounts.'],
]}
/>