Skip to main content

Users

Use the Users page to manage who belongs to the organization and what level of access they start with.

This page is the entry point for:

  • inviting members
  • reviewing who already has access
  • changing user type
  • assigning roles
  • removing access when needed

This page is about granting the right starting access. Fine-grained governance comes after that through roles and access domains.

Access​

  1. Click the Organization icon (building)
  2. Select "Users"
Permissions

Only administrators and owners can manage users.

User types​

Each user has a global type that defines their baseline rights:

TypeDescription
OwnerFull organization control, including billing and subscription decisions
AdministratorManages organization settings, users, and governance
EditorContributes to the knowledge base and content according to assigned rights
ViewerReads the knowledge base and content according to assigned rights
Counting

Editors, administrators, and owners count toward the Users limit of your plan. Viewers count toward the Viewers limit.

Administrators and owners can review current limits on the Organization page, in the Plan card.

In self-service organizations, Owner is the billing owner account. It cannot be created manually or removed.

Invite a user​

  1. Click "Invite User".
  2. Fill in:
    • Email: User's address.
    • User type: Viewer, Editor, or Administrator.
    • Roles: Business roles to assign (optional).
  3. Click "Create".

The user receives an invitation email with a link to create their account or sign in.

SSO organization

If your organization uses SSO, users are automatically created on their first login via your Identity Provider. They appear as Viewers by default.

Manage a user​

Change type​

  1. Click on the user in the list
  2. Change type in the selector
  3. Click "Validate"

If you change an existing editor or administrator to Viewer, Boldo warns that their private items are deleted.

Change roles​

  1. Click on the user
  2. Select roles to assign
  3. Click "Validate"

Roles define fine-grained permissions. Access domains then scope where those permissions apply.

Read Understand the access model for the detailed model.

Remove a user​

  1. Click on the user
  2. Click the delete icon
  3. Confirm
warning

The user immediately loses access. This action is irreversible.

You cannot remove the organization owner account.

SSO organization

For an SSO organization, first remove the user from your Identity Provider.

What to decide first​

Before assigning anything, answer these questions:

  • does this person only need to read, or also to contribute?
  • does this person need a paid Users seat, or only Viewer access?
  • is broad organization administration really required?
  • does the person need fine-grained access through roles and access domains?

If you decide the user type correctly first, the rest of the setup becomes much easier.