Adding Team Members
Invite users, assign roles, and manage permissions in Command Center.
Last updated: February 22, 2026
Ambient uses a role-based access control model. Each user is assigned one or more roles that control what they can view and manage in Command Center.
Inviting Users
- Go to Administration → Users.
- Click Invite User.
- Enter the user’s email address.
- Select a role (see role descriptions below).
- Click Send Invite.
The user receives an email with a sign-in link. They can also sign in via SSO if your tenant has it configured.
Built-in Roles
| Role | Permissions |
|---|---|
| Owner | Full access — billing, settings, user management, all content |
| Admin | All content and user management, no billing |
| Content Manager | Create, edit, publish wallpapers, screensavers, signatures, campaigns |
| Analyst | View-only access to analytics and reports |
| Companion | Personal companion notes and personal settings only |
Managing Existing Users
From Administration → Users you can:
- Change role: Click the three-dot menu → Edit Role.
- Suspend: Revoke access without deleting the user account.
- Remove: Permanently removes the user from your tenant.
Groups
Groups let you target campaigns and policies to subsets of users:
- Go to Administration → Groups.
- Click New Group.
- Add users to the group manually, or sync groups from your directory (Azure AD, Google Workspace, Okta).
Group membership is updated automatically when directory sync runs (every 15 minutes by default).
SSO & Directory Sync
If your organisation uses Azure AD, Okta, Google Workspace, or a SAML provider, see Setting up SSO to configure single sign-on and automatic user provisioning.