Invite and manage users to an account or environment

To help your team build and deploy integrations securely without disrupting business-critical workflows, a Celigo account supports a single Production environment alongside one or more non-production environments.

This article guides you through managing user roles and permissions across these environments—ensuring you can maintain strict security governance while keeping your development agile. You will learn which roles propagate automatically, how to handle environment-specific invitations, and what access levels look like in non-production spaces. For the foundational definitions of each role, see Manage user roles & permissions to an account. To learn about multiple environments, see Multiple environments overview.

Prerequisites: You must be an account owner or have admin access to the Production environment.

Invite users to an account or environment

As an account owner or admin, you can invite users to your account. If you have a Professional or Enterprise subscription with multiple environments, you can invite users to a specific environment (see Multiple environments overview).

Tip: Consider an access policy that keeps your account secure: invite users with specific permissions to specific environments and control access to the Production environment.

1. If you want to invite a user to a specific environment in a multiple environment structure, select the environment from the top of the page.

   

2. Go to Account , and then select Users.
3. Select + Invite user.
4. Enter the new user's email address, and then choose their Roles & permissions options. To invite multiple users with the same role, separate their email addresses with a comma.
5. Select Invite.

The user receives an email with a confirmation link that takes them to the sign-in page. If you invite someone who doesn't have a Celigo account yet, the invitation link will direct them to the sign-up page. Once they create their profile, they will automatically have access to your account.

When a user is invited to a specific environment, they're added to that environment's user list with a status of Pending and are treated as an existing user even before they accept. When a user is invited to more than one environment:

• If they accept, they're added to all invited environments and can leave any environment at any time.
• If they decline, they're removed from all invited environments. If they're re-invited to one environment later, they're added only to that environment.

Edit access permissions

Change a user's access permissions or remove them from an environment.

1. If you want to edit a user's access to a specific environment in a multiple environment structure, select the environment from the top of the page.

   

2. Go to Account , and then select Users.
3. Select Actions next to the user, and then select Manage user.
4. Change the Roles & permissions options, and then select Save.

When a user's role changes within one environment, the change applies to all environments the user belongs to. Notifications are sent to the invited user, the admins, and the owner when a user is invited, added, or removed, and when user access changes.

Roles & permissions options

The same options appear when you invite a user and when you manage an existing user. For what each role allows, see Manage user roles & permissions to an account.

• Admin — The same permissions as the account owner, except transferring ownership.
• Manage all — View and modify all integrations in the account.
• Monitor all — View all integrations in the account.
• Custom — Access to selected integrations only. Choose them in the Monitor integrations and Manage integrations lists.
• Users can edit retry data — Shown for Monitor all and Custom monitor access. On by default; turn it off to stop the user from editing retry data while fixing errors.
• Allow integration workspace creation — Shown for Monitor all and Custom access. Lets the user create their own integration workspace; their role becomes Custom, with Manage access to anything they create, upload, or clone.
• Security — Require single sign-on or multifactor authentication for this user. MFA applies to anyone who signs in with a password, and you can also require it after SSO when your policy calls for both. See Set up single sign-on (SSO) for an account and Set up and manage MFA for your account.

Note: Only the account owner sees Make account owner under Manage user. See Transfer account ownership to another user.

Invite users to an integration as a non-admin

If an owner or admin has turned on the Invitations setting (see Control user authentication and invitation permissions), users with Manage or Monitor access can invite others to an integration they belong to, with access equal to or lower than their own. When the setting is off, + Invite user doesn't appear on the integration's Users page.

1. On the Home page, select the integration.
2. Select Users, and then select + Invite user.
3. Search for an existing user or enter a new user's email address, and then select Monitor or Manage. To require multifactor authentication for the user, turn it on under Security.
4. Select Save.

The user receives an email with a confirmation link. To change the user's access later, select Actions next to them on the integration's Users page, and then select Manage user.

Tip: When you assign a flow step's errors to someone who isn't yet a user of the integration, you can invite them from the Errors list.

Remove users

Remove a user's access to an account or environment.

1. If you want to remove a user's access to a specific environment in a multiple environment structure, select the environment from the top of the page. If you want to remove them from the account, select Production as the environment.

   

2. Go to Account , and then select Users.
3. Select Actions next to the user, and then select one of the following:
   • Remove user from environment - Remove a user from an environment in a multiple environment account.
   • Remove user from account - Remove a user from an account that only contains a production environment.

How owners and admins behave across environments

Production environment owners and administrators retain unique privileges that extend across your entire account. When a new environment is created, the Production environment owner and admins are automatically assigned the exact same roles within it. However, certain actions remain restricted to the Production environment itself: an owner can only manage security policies for a Production admin from within the Production space, and account ownership transfers must be initiated by the Production owner to another user within that same environment (see Transfer account ownership to another user).

How roles work across environments

A user can hold different roles and permissions in different environments, as long as they aren't the owner or admin of the Production environment. For example, a user can be an Admin in non-production Environment A and a Manage user in non-production Environment B. Access levels can also differ per environment — a user might have Manage access in Production and Monitor access in a Staging environment.

Delete your Celigo account

To permanently delete your account and remove all associated data:

1. Delete all resources used by any flow or integration in your account.
2. Delete all integrations and flows in your account.
3. Delete all user profiles and account information.
4. Delete any remaining resources.
5. Notify Celigo Support of your request to delete your account and remove all associated data.

Learn more

• Manage user roles & permissions to an account
• Manage Celigo Support access
• Multiple environments overview