Manage users in an Astro Organization

As an Organization Owner, you can add new team members to Astro and grant them user roles with permissions for specific actions across your Organization.

To manage users at the Workspace level, see Manage Workspace users. To manage groups of users, see Manage Teams.

Prerequisites

• Organization Owner permissions.

For more information on user roles, see Manage user permissions on Astro.

Add a user to an Organization

If your Organization has configured an identity provider (IdP) with Astro, assign users to Astro from your identity provider. By default, any users that you assign can join your Organization as an Organization Member without an invite. To change this behavior, see Disable just-in-time provisioning.

You can also manually add users to an Organization. You must manually add users in the following circumstances:

• You don’t have an IdP configured.
• You disabled just-in-time provisioning.
• You want to invite a user to an Organization from a domain that you don’t own, such as a third party consultant.
• You want to invite someone from your company to Astro as a role other than Organization Member.

1. In the Astro UI, click Organization Settings.

2. Go to Access Management.

3. Click Invite member:

4. Enter the user’s email.

5. Select an Organization role for the user. See Organization roles reference.

6. Click Invite member.

After you add the user, their information appears in the Users tab in Access Management. To access Astro, the user needs to accept the invitation sent by email and then create an Astro account.

Update or remove an Organization user

See User permissions to view the permissions for each available Organization role.

1. In the Astro UI, click Organization Settings.

2. Go to Access Management.

3. Find the user in the Users list. To view or manage the user’s Organization, Workspace, and Deployment roles, either click the user’s row to open the User Details page, or open the action menu (⋯) on the user’s row and select Edit User.

4. (Optional) Edit the user’s role. See Organization roles. If you opened the action menu, you can change the user’s Organization role from the Edit User option. On the User Details page you can view and edit the user’s Organization, Workspace, Deployment, and Dag roles.

5. If you updated the user’s role, click Update member. To delete the user, open the action menu and select Remove user…, or click Remove member on the User Details page.

Add a group of users to Astro using the Astro CLI

You can use the Astro CLI and a shell script to add multiple users to an Organization at once. The shell script reads from a text file which contains user information. You can generate the text file for each new batch of users that need to assigned to an Organization and run the script using the Astro CLI.

1. Create a text file named users.txt.

2. Open the text file. On each line, add a user’s email and their role separated by a space. The following is an example of how you can write a list for inviting users to an Organization:

   user1@astronomer.io ORGANIZATION_MEMBER
   user2@astronomer.io ORGANIZATION_OWNER
   user3@astronomer.io ORGANIZATION_BILLING_ADMIN
   user4@astronomer.io ORGANIZATION_OWNER

3. Create a file named add-users.sh and then add the following script to it:

   $
   #!/bin/bash
   $
   $
   # Check if a file was provided as an argument
   $
   if [ $# -ne 1 ]; then
   $
       echo "Usage: $0 <file>"
   $
       exit 1
   $
   fi
   $
   # Loop through the file to read each user email address and the role, and use Astro CLI to invite them
   $
   while read line; do
   $
       email=$(echo "$line" | cut -d' ' -f1)
   $
       role=$(echo "$line" | cut -d' ' -f2)
   $
       echo "Inviting $email as $role..."
   $
       astro organization invite "$email" --role "$role"
   $
   done < "$1"

4. Sign in to the Astro CLI using astro login, and then run astro organization list to ensure that you’re in the same Organization where you want to add the users. If you’re not in the right Organization, run astro organization switch.

5. Run the following command to execute the shell script:

   $
   sh path/to/add-users.sh path/to/users.txt

6. (Optional) To use this script as part of a CI/CD pipeline, create an Organization API token and specify the environment variable ASTRO_API_TOKEN=<your-token> in your CI/CD environment.

See also

• Manage Workspace users
• Manage Teams
• Manage user permissions on Astro
• Dag-level access control