> ## Documentation Index
> Fetch the complete documentation index at: https://docs.credibledata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Users & Groups

> Manage the users and groups in your organization

Manage your organization's users and groups from the Credible App — click **Users & Groups** in the bottom left of the sidebar. This page covers who is in your organization; for what they can access, see [Permissions](/platform-admin/permissions).

## Manage Members

View and manage users in your organization. The Users tab shows all organization members with their email, role, and actions.

<img src="https://mintcdn.com/ms2/hbN0V7V2tgDWdpis/images/quickstart/users-page.png?fit=max&auto=format&n=hbN0V7V2tgDWdpis&q=85&s=86ef2c6e1c9ef89c3d31a042009f2fb0" alt="Users page showing members and roles" style={{maxWidth: "100%", height: "auto"}} width="1886" height="1032" data-path="images/quickstart/users-page.png" />

### Organization Roles

| Role        | Access                                                                                                                                                                                                                                                  |
| ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Admin**   | Full access to the Credible App — can create environments, manage connections, and administer users and groups                                                                                                                                          |
| **Modeler** | Can build and publish packages in environments shared with them                                                                                                                                                                                         |
| **Member**  | Can access workspaces shared with them in the Credible App — chat with data, view reports and data apps, and explore models. Can also be granted viewer access to specific environments or packages for consumption via the Data API (e.g., MCP access) |

An organization role sets what someone can do overall — access to specific environments, packages, and workspaces is granted separately (see [Permissions](/platform-admin/permissions)).

### Actions

* **Invite** — Send an email invitation to add a new user to your organization
* **Edit role** — Change a user's role between Admin, Modeler, and Member
* **Remove** — Remove a user from the organization

## Manage Groups

Groups let you manage permissions for multiple users at once. Instead of granting access to individual users, organize users into groups and grant access to the group.

Switch to the **Groups** tab to view and manage groups. Click a group to view its members and manage membership.

<img src="https://mintcdn.com/ms2/hbN0V7V2tgDWdpis/images/quickstart/groups-page.png?fit=max&auto=format&n=hbN0V7V2tgDWdpis&q=85&s=b33b951bb5550f83ba38c9a940b9f312" alt="Groups page showing groups and member counts" style={{maxWidth: "100%", height: "auto"}} width="1884" height="1594" data-path="images/quickstart/groups-page.png" />

### Group Roles

| Role       | Capabilities                                     |
| ---------- | ------------------------------------------------ |
| **Admin**  | Can add/remove members and manage group settings |
| **Member** | Inherits the group's access permissions          |

### Actions

* **Create Group** — Create a new group with a name and description
* **Add members** — Add users or other groups to a group
* **Remove members** — Remove users or groups from a group
* **Delete Group** — Remove the group (does not affect individual user accounts)

### Group Access Tokens (API Keys)

A group can hold **access tokens** — API keys that let applications and services act with the group's permissions. Because the key's access is the group's access, you can adjust or revoke what an integration can reach by editing the group, without touching the key itself. Create and manage tokens with the [CLI](/platform-admin/cli#resource-management) (`cred add group-access-token`), and see [API Access](/how-to/integrating/apis#create-an-api-key) for the full setup.

## Next Steps

<CardGroup cols={2}>
  <Card title="Permissions" icon="lock" color="#5C7A93" href="/platform-admin/permissions">
    Grant users and groups access to environments, packages, workspaces, and documents
  </Card>

  <Card title="API Access" icon="key" color="#94793A" href="/how-to/integrating/apis">
    Authenticate applications with group access tokens
  </Card>
</CardGroup>
