User Management

Spell for Teams allows you to manage users in your organization via the web console. This is done via the user management panel under Settings.

Screenshot of the user management panel

Adding users

To add a user to the organization, click on the "Add Member" button at the top of the screen.

Add users modal

Each email address will receive an email containing a link to set up their account. You may invite multiple users at once by providing a list of email addresses in a comma-delimited or semicolon-delimited format. Invitations never expire and may be cancelled at any time.

Switching users

If you are a member of multiple organizations, you will be logged into all of those organizations simultaneously and will be able to switch between them at any time.

In the web console, click on the organization name in the sidebar to see a dropdown menu of your organizations. Click on a different organization to switch to that one.

In the CLI, run spell owner to see a list of your organizations. To switch to a different organization, run spell owner NAME.

Managing user permissions

There are three tiers of membership in a Spell organization:

  • Member—members are regular users of the platform. Members can create, manage, and delete cluster resources—SpellFS resources, runs, workspaces, etcetera. Note that this includes resources that they do not own.
  • Manager—managers get additional user management and cluster configuration permissions.
  • Admin—admins additionally get access to billing. There must always be at least one admin in the organization.

Managers can only promote other users up to the rank of manager, or demote managers to members. Admins can promote or demote users to any rank. Managers and admins can demote themselves, subject to the restriction that there is always at least one admin in the organization.

Removing users

Managers and admins can remove users from the organization. Click on the ... icon to bring up the extended menu and then click on "Remove".

The last admin account in the organization cannot be removed.

Viewing account authentication types

Spell accounts may be authenticated using either their email and password or using the Sign In With Google integration. Users in an organization can see the authentication settings of their peers using the "Auth" column in the users table: Spell logo for email and password, Google logo for Sign In With Google.

Sign In With Google authentication enables single sign-on and two-factor authentication, making it advantageous for security-conscious organizations. This feature allows organization managers and admins to verify the account type of their users and tell them to migrate, if needed.