Docs Getting started
Getting started
Invite your team
On hosted Kumo.io, an account owner invites teammates from Members in your Kumo.io account, and every member can log in to the account's workspace. On a self-hosted installation, invite teammates from Settings › Members with a single-use link, and give them a role at the same time.
Hosted Kumo.io
On hosted Kumo.io, people log in to a workspace with their Kumo.io account. Everyone who is a member of the Kumo.io account that owns the workspace can log in to it, so adding a teammate means adding them to your Kumo.io account.
Members are managed in your Kumo.io account at https://account.kumo.io/members. In the workspace, Settings › Members links there with Manage Members in Your Kumo.io Account, and the Your Kumo.io Account group in Settings links to Members & Invites.
Who can do what
| Owner | Member | |
|---|---|---|
| See the account's members | Yes | Yes |
| Invite people | Yes | No |
| Remove a member | Yes | No |
A hosted account has two roles: Owner and Member. There is no way to change someone's role from the members page yet.
Invite a teammate
- Open https://account.kumo.io/members.
- Under Invite by Email, enter your teammate's email address.
- Select Send Invite.
Kumo.io emails the invitation, with the subject "You've been invited to a Kumo.io account", and shows "Invitation sent." If no email could be sent, the page says "Invitation created. No email was sent, so share this link with them:" and shows the link to copy.
Your teammate opens the link, which goes to the Kumo.io sign-up form. They create their Kumo.io login there and join your account as a Member. They can then log in to your workspace.
If your teammate already has a Kumo.io login, for example for another Kumo.io account, they select Log in to accept on the sign-up form and log in. The link then shows Join This Account; they select Accept Invitation, join your account as a Member, and land in it. If they're already logged in when they open the link, they see Join This Account straight away. Their other Kumo.io accounts are unaffected.
- Single use, for 7 days. A link works once. After it's used, or after 7 days, it's refused with "This invite has expired or has already been used. Ask the account owner for a new one." Send a new invite.
- An existing login must be the invited address. Someone logged in with a different email address sees "This invitation was sent to a different email address. Log out, then log in with that address to accept it." The link keeps working for the right person.
- For the invited address only. A sign-up through the link must use the email address you invited (capital letters don't matter); another address is refused with "This invitation was sent to a different email address. Sign up with that address to accept it." The link keeps working for the right person.
- Pending invites aren't listed. An invite can't be withdrawn; an unused one stops working after 7 days.
Remove a member
Select Remove next to the member, then Confirm Remove. They can no longer log in to the account's workspaces, and a session they already have open ends within 30 minutes.
You can't remove yourself, and an account owner can't be removed.
If your account uses SCIM provisioning, your identity provider can add and remove members for you.
The rest of this page applies to self-hosted installations.
Who can invite
Only an Account owner or Account admin can invite people and manage their access. Anyone else who opens the roles page sees "Only account owners and admins can view and manage roles. Ask one of them to change your access."
Create an invite
- Open Settings, then Members.
- Under Invite by email, enter your teammate's email address.
- Optionally choose a role under Role (optional). Leave it at Member only to add your teammate without a role and grant one later.
- Select Invite Member.
Kumo.io shows the invite link once: "Share this invite link — it is shown once and joins your account when accepted." Select Copy Link and send it to your teammate.
If your installation can send email, Kumo.io also emails the link to that address with the subject "You've been invited to a Kumo.io account". Email needs your installation's public URL and an email relay to be configured; see Configure email. Even when the email is sent, Kumo.io still shows you the link to copy.
What your teammate does
Your teammate opens the link. It goes to the Create Your Kumo.io Account form with the message "You've been invited — sign up to join the account." They enter their name, email and a password of at least 10 characters, then select Sign Up. Instead of creating an account of their own, they join yours with the role you chose.
Invitees appear under Members once they've accepted and signed up.
The link must be used by someone who doesn't have a login on your installation yet, signing up with the email address you invited. An email that is already registered can't sign up again, and a different address is refused with "This invitation was sent to a different email address. Sign up with that address to accept it."
Invite links
- Single use. A link works once. After that, or once it expires, it's rejected.
- Expires after 7 days. If it expires, create a new invite.
- Tied to the email address. Only a sign-up with the invited email address can use the link. Still share it only with the person you mean.
- Can't be withdrawn. There is no way to cancel an invite before it's used. An unused invite stops working after 7 days.
Roles you can give
Choose any role you're allowed to grant. These are the built-in roles; custom roles your account has made appear in the list too.
| Role | What it allows |
|---|---|
| Account owner | Full read and write across the account, including billing, audit and access management. |
| Account admin | Everything the owner can do except account administration and billing changes. |
| Account editor | Build and operate workspaces, sources, environments, views and policies account-wide, without access management, billing or audit. |
| Billing admin | Manage billing and subscriptions, with read-only account details and audit. |
| Account viewer | Read-only across the whole account. |
| Workspace admin | Full management of one workspace. |
| Workspace editor | Author environments and views, and start syncs, in one workspace. |
| Source operator | Start source syncs and see how runs went. |
| Workspace viewer | Read-only within one workspace. |
You can't grant a role with more access than your own; Kumo.io refuses the invite if you try. More detail is in Roles and permissions.
Change what a teammate can do
Roles are managed on Settings › Roles & Access. There is no single "change role" action. Instead:
- Choose the Role, the Member, and the Scope (Whole account, or one workspace), then select Grant Role.
- Find the role they no longer need and select Revoke. They lose that access immediately.
An account must always keep at least one owner. The last owner's assignment is marked Last Owner and can't be revoked until you make someone else an owner.
To take away someone's access, revoke the roles they hold. There is no way to remove a person from the account's member list.