👥Users & Roles

The Users & Roles tab allows you to add new users to your Arnica Org and manage the existing users within the system.

Adding Users

To invite someone to your Arnica org:

1. Navigate to Admin > Security > Users & Roles.

2. Enter the user's email address in the Email field under Add Users.

3. Click Invite.

The user receives a welcome email with a personalized link to set their password. Once they sign in, they are redirected into your org.

The email address you enter is tied to all activity within Arnica, including mitigation actions and admin audit logs. If the user has multiple email addresses, make sure to use the one they intend to work with.

Enter an email address and click Invite to send an invitation

If the Invitation Wasn't Received

If a user hasn't received their invitation email, check the following:

• The email may have landed in their spam or blocked emails folder.

• Double-check that the email address is spelled correctly.

• The user may already be a member of another Arnica org. Each user can only belong to one org at a time. To join your org, they will need to leave their current one first — they can do this from Profile menu → Edit Account → Leave.

If none of the above apply, reach out to Arnica support via the in-app chat or at [email protected].

Existing Users

All users are listed in the Users and Roles table with the following columns:

• Email — the user's email address.

• Role — the role currently assigned to them.

• Last Updated — when the user record was last changed.

• Status — blank for active users; shows invited for users who haven't accepted their invite yet.

Use the search bar at the top of the table to filter by email.

The Users and Roles table lists all org members with their current role and status

Changing a User's Role

Click the pencil icon in the Actions column next to a user to open the role picker. The available roles are:

• Admin

• Security Reviewer

• Collaborator

• Maintainer - Products

• Collaborator - Products

• Read Only

• Read Only - Products

Click the pencil icon to open the role picker

Role changes take effect immediately.

For a full description of what each role can access, see Role Based Access Control (RBAC).

Role Management Mode

At the top of the page, a toggle lets you choose between Arnica-managed and SSO-managed roles:

• Arnica — roles are set manually within the Arnica UI.

• SSO — roles are derived from your identity provider. When switched to SSO, a configuration panel appears where you can map SSO groups to Arnica roles.

Click Save after switching modes for the change to take effect.

For configuration details, see Role Based Access Control (RBAC).

Removing a User

To remove a user from your org, click the trash icon in the Actions column. The user loses access immediately.

Click the trash icon to remove a user from your org

Tenant Membership

Each Arnica user can belong to one org at a time. If a user needs to move to a different org, they must leave their current one first. They can do this from the Profile menu → Edit Account → Leave.