Appearance
User Roles & Access Control
DMOps.ai uses role-based access control (RBAC) to manage what each human user can see and do in the system.
Built-in roles
| Role | Access |
|---|---|
| Admin | Full access — org chart, agents, integrations, settings, billing |
| Manager | Can create and assign tasks, view agent status and traces, approve inbox items |
| Member | Can create tasks, view the task board, manage their own inbox items |
| Read-only | Can view the task board and inbox but cannot create or modify anything |
Inviting users
- Go to Settings → Users.
- Click + Invite User.
- Enter the user's email address.
- Select their role.
- Click Send Invite.
The user receives an email with a sign-in link. On first login they set their password.
Changing a user's role
- Go to Settings → Users.
- Click the user's name.
- Change the Role dropdown.
- Click Save.
The change takes effect immediately — no need to ask the user to log out.
Removing a user
- Go to Settings → Users.
- Click the user's name.
- Click Remove User → confirm.
The user's login is revoked immediately. Their task history and audit entries are preserved.
Custom roles
Coming soon
Custom roles with fine-grained permissions (e.g. can approve Jira tasks but not ERP tasks) are on the roadmap.
Authentication
DMOps.ai currently supports username/password authentication via HTTP Basic Auth. Enterprise SSO (SAML/OIDC) support is on the roadmap.
API access
Users who need programmatic access can use an API key. See the Authentication guide for how to generate and use API keys.
Multi-tenant isolation
Each DMOps.ai deployment is a single tenant. Users from one tenant cannot see or access data from another tenant. If you are a partner managing multiple clients, each client has a fully isolated deployment.
See the Partner Guide for how to provision and manage multiple tenants.