Skip to main content

Adding & Managing Users

Invite team members and manage user access to your CastellanAI portal.

User Management Overview

CastellanAI supports multiple users with role-based access control. Add team members, assign appropriate roles, and manage permissions to ensure secure collaboration across your security operations team.

FeatureDescription
3-10 UsersVaries by subscription tier
4 Role TypesAdmin, Analyst, Viewer, Responder
Audit TrailComplete user activity logging

How to Add New Users

Step 1: Navigate to User Management

Access the user management interface from your portal dashboard:

  1. Log in to your CastellanAI portal
  2. Navigate to Settings -> User Management
  3. Click the "Add User" button in the top-right corner

Step 2: Enter User Details

Provide the required information for the new user:

FieldRequiredDescription
Email AddressYesUser's work email for login and notifications
Full NameYesFirst and last name for display in portal
RoleYesSelect appropriate role based on user's responsibilities
TeamNoAssign to specific team for organizational grouping

Step 3: Assign Role & Permissions

Choose the appropriate role for the user based on their job function:

RoleAccess Level
AdministratorFull access to all features including user management, configuration, and billing. Can execute all response actions.
Security AnalystView and investigate security events, execute response actions, manage alerts. Cannot change configuration or users.
Incident ResponderView events and execute response actions. Limited investigation capabilities. Cannot modify configuration.
ViewerRead-only access to dashboard, events, and reports. Cannot execute actions or modify settings.

Step 4: Send Invitation

Complete the user creation and send invitation email:

  1. Review all entered information for accuracy
  2. Click "Create User" to finalize
  3. User receives invitation email with setup link
  4. User has 7 days to accept invitation and set password
tip

You can resend invitation emails from the User Management page if users don't receive them initially.

Role Permissions Comparison

PermissionAdminAnalystResponderViewer
View Dashboard & EventsYesYesYesYes
Investigate EventsYesYesLimitedNo
Execute Response ActionsYesYesYesNo
Manage Alerts & RulesYesYesNoNo
Generate ReportsYesYesYesYes
Manage ConfigurationYesNoNoNo
Add/Remove UsersYesNoNoNo
Manage BillingYesNoNoNo

Managing Existing Users

Edit User Details

Update user information, change roles, or modify team assignments from the User Management page. Click on any user to view details and edit.

Reset Password

Users can reset their own passwords via the login page. Admins can trigger password reset emails from the User Management page if needed.

View User Activity

Track user actions including logins, event investigations, and action executions. Access audit logs from Settings -> User Activity.

Disable/Remove Users

Temporarily disable user accounts to prevent access without deleting them. Permanently remove users when they leave your organization. All user actions remain in audit logs.

Best Practices

  • Follow Principle of Least Privilege - Assign the minimum role and permissions required for each user's job function
  • Enable Multi-Factor Authentication - Require MFA for all users, especially administrators, to enhance account security
  • Review User Accounts Quarterly - Regularly audit user accounts to ensure permissions are still appropriate and remove inactive users
  • Monitor User Activity - Regularly review user activity logs to detect unusual behavior or potential security issues
  • Offboard Users Promptly - Disable or remove user accounts immediately when employees leave your organization

What's Next?

Need More User Licenses?

Running out of user seats? Upgrade your subscription to add more team members and enhance your security operations team's capabilities.

Upgrade Subscription