managing-users
Installation
SKILL.md
Managing Users
A user (internally called an "ashare") represents a person's access grant to a Celigo account, defining what they can see and do. Concerns when managing users:
- Access strategy -- choosing between account-wide access (administrator, manage, monitor) and per-integration access for least-privilege control
- Integration-level permissions -- granting manage or monitor access to specific integrations, optionally combined with account-wide monitor as a baseline
- Security enforcement -- requiring MFA or SSO per user to meet compliance requirements
- Feature flags -- controlling access to APIM features and whether monitor-level users can edit retry data
- Lifecycle -- inviting, disabling, and removing users as team composition changes
Users are an account administration concern, not a flow or integration resource.
Access Strategies
There are four strategies for granting access. Choose based on the principle of least privilege.