> For the complete documentation index, see [llms.txt](https://intuitem.gitbook.io/ciso-assistant/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://intuitem.gitbook.io/ciso-assistant/configuration/organization/users.md).

# Add and manage users

Under Organization, click on Users and then Add user:

<figure><img src="https://629777851-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCqFeU3oPCgDWkkR386NK%2Fuploads%2Fgit-blob-9cb3335477df78795e9d51065811d3b88f429f8d%2Fimage%20(14).png?alt=media" alt=""><figcaption></figcaption></figure>

Set up the email of the new user:

<figure><img src="https://629777851-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCqFeU3oPCgDWkkR386NK%2Fuploads%2Fgit-blob-aed11dd7e952132585e663f582ebf38b9a28cd06%2Fimage%20(15).png?alt=media" alt=""><figcaption></figcaption></figure>

Once created, a new user doesn't have any permissions by default. Click edit and update the user groups:

<figure><img src="https://629777851-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCqFeU3oPCgDWkkR386NK%2Fuploads%2Fgit-blob-bb96eb4138f0b05b5965eae19885a38275c49a78%2Fimage%20(17).png?alt=media" alt=""><figcaption></figcaption></figure>

If you are working on a single domain, or working on solo, you might just set \`Global - Administrator\`

<figure><img src="https://629777851-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCqFeU3oPCgDWkkR386NK%2Fuploads%2Fgit-blob-939eb7efb1e55f0bbeec2456d6df1eb4bf1201c0%2Fimage%20(16).png?alt=media" alt=""><figcaption></figcaption></figure>

When the user are added, and if the mailer is set, he/she will receive an email to set up the password. If not, you can set a temporary password as illustrated above.

## Disable a user's MFA

If a user has lost access to all their MFA factors (phone wiped, hardware key lost) and has no recovery codes left, an administrator can disable their MFA from the user's edit page. The link only appears when the target user has MFA enabled and you are not editing yourself. See [Setting up Multi-Factor Authentication (MFA) → Admin recovery](/ciso-assistant/configuration/mfa.md#admin-recovery-disabling-another-users-mfa) for the full procedure.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://intuitem.gitbook.io/ciso-assistant/configuration/organization/users.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
