# User Management


--------------------------------------------------------------------------------
title: "Introduction"
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: "2026-03-18T07:41:08.535Z"
source: "https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/introduction/"
service: "Cloud Scale"
--------------------------------------------------------------------------------


# User Management

The *User Management* feature of the Authentication component enables you to manage {{%link href=&#34;/en/cloud-scale/help/authentication/user-management/users/implementation/&#34; %}}users{{%/link%}} that have signed up to your application. User Management also enables you to configure and maintain different {{%link href=&#34;/en/cloud-scale/help/authentication/user-management/roles/implementation/&#34; %}}roles{{%/link%}} for each user. 

{{%note%}}{{%bold%}}Note:{{%/bold%}} You will have to enable at least one authentication type to access this section.{{%/note%}}

You can add an end-user to your application in four different ways:

1. The application developer or a collaborator of the Catalyst project can {{%link href=&#34;/en/cloud-scale/help/authentication/user-management/users/implementation/#adding-a-new-user-from-the-console&#34; %}}add a new user{{%/link%}} from Authentication in the Catalyst console after implementing one of the authentication types- {{%link href=&#34;/en/cloud-scale/help/authentication/native-catalyst-authentication/hosted-authentication-type/introduction/&#34; %}}Hosted{{%/link%}}, {{%link href=&#34;/en/cloud-scale/help/authentication/native-catalyst-authentication/embedded-authentication/introduction/&#34; %}}Embedded{{%/link%}}, and {{%link href=&#34;/en/cloud-scale/help/authentication/third-party-authentication/introduction/&#34; %}}Third-party{{%/link%}}.

2. The application developer or collaborator can also add a user using {{%link href=&#34;/en/sdk/java/v1/cloud-scale/authentication/add-new-user/&#34; %}}Java{{%/link%}}, {{%link href=&#34;/en/sdk/nodejs/v2/cloud-scale/authentication/add-new-user/&#34; %}}Node.JS{{%/link%}}, {{%link href=&#34;/en/sdk/python/v1/cloud-scale/authentication/add-new-user/&#34; %}}Python{{%/link%}}, or {{%link href=&#34;/en/sdk/web/v4/cloud-scale/authentication/add-new-user/&#34; %}}Web{{%/link%}} SDKs or the {{%link href=&#34;/en/api/code-reference/cloud-scale/authentication/add-new-user/#AddNewUser&#34; %}}API{{%/link%}}s.

3. You can distribute the URL of your application to the user through other mediums and enable them to sign-up to it through the application&#39;s sign-up page. 

4. You can enable provisions for a {{%link href= &#34;/en/cloud-scale/help/authentication/user-management/roles/introduction/&#34; %}}user to be added by another existing user{{%/link%}} of the application with the necessary privileges, such as a user of the role App admin. You can incorporate this feature in your application&#39;s logic.

Catalyst will send an email invite to the user who was added containing a URL that will open a sign-up form where they can set up their password, in all four cases. After they set up their password, they will either be redirected to the {{%link href=&#34;/en/cli/v1/project-directory-structure/introduction/&#34; %}}default redirect URL of the application{{%/link%}} or the URL you specify while inviting the user from the console.

{{%note%}}{{%bold%}}Note:{{%/bold%}} You will be able to add a maximum of 25 users in your application in the development environment. After you deploy your application to production, you can include any number of end-users in it.{{%/note%}}

The *User Management* feature includes two sections in the console.

1. {{%link href=&#34;/en/cloud-scale/help/authentication/user-management/users/implementation/#adding-a-new-user-from-the-console&#34; %}}Users{{%/link%}}: You can add end-users to your application in this section directly, and they will receive email invites. You also be able to enable or disable their access to the application, view or modify their details, and delete them from the application.
&lt;br /&gt;

2. {{%link href=&#34;/en/cloud-scale/help/authentication/user-management/roles/implementation/&#34; %}}Roles{{%/link%}}: This section enables you to create and configure user roles, based on your business and organizational requirements. You will also be able to view all the user roles available in the project, along with all their details, and edit them, if required.
&lt;br /&gt;

&lt;br /&gt;

## Roles


--------------------------------------------------------------------------------
title: "Introduction"
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: "2026-03-18T07:41:08.536Z"
source: "https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/roles/introduction/"
service: "Cloud Scale"
--------------------------------------------------------------------------------


# Roles

### Introduction

Roles define a set of permissions and the level of access granted for a user to access your application or modify its data. You can define the scopes and access permissions for certain Catalyst components to each role, and assign a role to every user. This categorization enables the users of your application to only access functionalities that are relevant to them.

*Roles* currently apply to the {{%link href=&#34;/en/cloud-scale/help/data-store/introduction/&#34; %}}Data Store{{%/link%}} and the {{%link href=&#34;/en/cloud-scale/help/file-store/introduction/&#34; %}}File Store{{%/link%}}. You can define the {{%link href=&#34;/en/cloud-scale/help/data-store/scopes-and-permissions/&#34; %}}scopes and permissions{{%/link%}} of each table for each user role in the Data Store. These scopes and permissions also apply to {{%link href=&#34;/en/cloud-scale/help/search-integration/introduction/&#34; %}}Search{{%/link%}} and {{%link href=&#34;/en/cloud-scale/help/zcql/introduction/&#34; %}}ZCQL{{%/link%}} by extension, since these components are tied closely to the Data Store. Similarly, you can {{%link href=&#34;/en/cloud-scale/help/file-store/implementation/#set-permissions-for-a-folder&#34; %}}define Folder access permissions{{%/link%}} for each role in the File Store.

*Roles* is available as a section of the *User Management* feature in *Authentication*. 

Two system defined roles are present by default:

1. {{%badge%}}{{%bold%}}App Administrator{{%/bold%}}{{%/badge%}}: The users assigned to the {{%badge%}}App Administrator{{%/badge%}} role essentially have an admin access to the application by default. You can override this and define their access levels to the tables in the {{%link href=&#34;/en/cloud-scale/help/data-store/introduction/&#34; %}}Data Store{{%/link%}} and to the folders in the {{%link href=&#34;/en/cloud-scale/help/file-store/introduction/&#34; %}}File Store{{%/link%}}.

2. {{%badge%}}{{%bold%}}App User{{%/bold%}}{{%/badge%}}: The users assigned to the {{%badge%}}App User{{%/badge%}} role essentially have an end-user level access to the application by default. You can also override this and define their access levels in the {{%link href=&#34;/en/cloud-scale/help/data-store/introduction/&#34; %}}Data Store{{%/link%}} and the {{%link href=&#34;/en/cloud-scale/help/file-store/introduction/&#34; %}}File Store{{%/link%}}.

{{%note%}}{{%bold%}}Note:{{%/bold%}} 

* The {{%badge%}}App User{{%/badge%}} role is considered to be the default role. When you create a custom role and do not specify the scopes of the role it needs to follow, the scopes of the {{%badge%}}App User{{%/badge%}} role will apply to the custom role.{{%/note%}}

In addition to these roles, you can create your own custom roles and define their permissions. You can also make these custom roles as {{%badge%}}Default{{%/badge%}} roles. When a user role is set as the **default role**, the users who are added to your application are assigned to that role automatically, and the permissions that have been set for that role are made available to them.

&lt;br /&gt;

--------------------------------------------------------------------------------
title: "Benefits"
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: "2026-03-18T07:41:08.536Z"
source: "https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/roles/benefits/"
service: "Cloud Scale"
--------------------------------------------------------------------------------


# Benefits

* Roles enable you to group your application users based on the access levels and permissions given to them. 

* Roles help you to prevent unauthorized access to view or modify application data, and boost the resource and data security in your application. 

* You can configure scopes and grant specific permissions to actions like viewing a table&#39;s data, deleting rows from a table, or uploading files in specific folders in the {{%link href=&#34;/en/cloud-scale/help/data-store/introduction/&#34; %}}Data Store{{%/link%}} and the {{%link href=&#34;/en/cloud-scale/help/file-store/introduction/&#34; %}}File Store{{%/link%}} for custom roles. 

* They also enable you to control the data flow and the design of your application as per your needs. You can build your application by keeping in mind the multi-level access you can grant to various user groups.

--------------------------------------------------------------------------------
title: "Implementation"
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: "2026-03-18T07:41:08.536Z"
source: "https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/roles/implementation/"
service: "Cloud Scale"
--------------------------------------------------------------------------------


# Implementation

### Create a New User Role 

When you create a new custom role in Catalyst, you must clone an existing role. This action will clone the set of permissions from the parent role to the new role. You can change the scopes and permissions of your custom role in the {{%link href=&#34;/en/getting-started/set-up-a-catalyst-project/profiles-and-permissions/&#34; %}}Permissions{{%/link%}} section of {{%link href=&#34;/en/cloud-scale/help/data-store/introduction/&#34; %}}Data Store{{%/link%}} and {{%link href=&#34;/en/cloud-scale/help/file-store/introduction/&#34; %}}File Store{{%/link%}}.

{{%note%}}{{%bold%}}Note:{{%/bold%}} You will not be able to delete roles from Catalyst currently. The provision to delete roles will be rolled out soon.{{%/note%}}

To create a new user role for your Catalyst application:

1. Click the **Roles** tab of the *User Management* section of *Authentication*. Click the **Add Roles** button.
&lt;br /&gt;

2. Enter the name and description for the *Role*.
&lt;br /&gt; 

3. Choose an existing role to clone the scopes and permissions for your custom role from the drop-down selection of **Clone Role**.
&lt;br /&gt;

4. You can enable the **Make as Default** toggle option if you want to ensure that when an end-user is added to your application, they will be automatically added to this role by default. Catalyst will automatically apply the permissions defined for this role to the new user.
&lt;br /&gt;

5. Click **Add**.
&lt;br /&gt;

The role will now be displayed in the *Roles* section along with the unique *Role ID* generated by Catalyst, the description of the role, the details of the collaborator that created the role and the date and time the role was created on.

### Edit a Role

You can edit the name, description, and choose if you wish to make the role a default role or not using the **Make as Default** toggle.

To edit a role:

1. Click the **ellipsis icon** present at the corner of the role you wish to edit and select **Edit**.
&lt;br /&gt;

2. Make the required changes and click **Update**.
&lt;br /&gt;


### Delete a Role

The following points need to be taken note of before you opt to delete a role:

* While you can edit a system defined role—{{%badge%}}App Administrator{{%/badge%}} and {{%badge%}}App User{{%/badge%}}, you cannot delete them.

* You cannot delete a {{%badge%}}Default{{%/badge%}} role. To delete a role that is marked as {{%badge%}}Default{{%/badge%}}, you need to make another role as {{%badge%}}Default{{%/badge%}} before attempting to delete the intended role.

* Before deleting a role you need to transfer its users to a new or a different existing role. 


To delete a role: 

1. Click the **ellipsis icon** present at the corner of the role you wish to delete and select **Delete**.
&lt;br /&gt;

2. Transfer the users of the role that you are going to delete to a different role. You can do so by choosing the role from the drop-down.
&lt;br /&gt;

{{%note%}}{{%bold%}}Info:{{%/bold%}} If there are more roles in the {{%link href=&#34;/en/deployment-and-billing/environments/development-environment/&#34; %}}development environment{{%/link%}} than in the {{%link href=&#34;/en/deployment-and-billing/environments/production-environment/&#34; %}}production environment{{%/link%}}, and if you choose to migrate your project back to development from production, then:

* The additional roles present in the development environment will be automatically deleted.

* The users mapped to these roles will be mapped to the {{%badge%}}Default{{%/badge%}} role as listed in the production environment.{{%/note%}}

3. Click **Yes, Delete** to delete the role.
&lt;br /&gt;

You will get a console notification notifying you that the required role has been deleted and its users have been successfully transfered to the Trasfer Role you selected.
&lt;br /&gt;
&lt;br /&gt;

## Users


--------------------------------------------------------------------------------
title: "Introduction"
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: "2026-03-18T07:41:08.536Z"
source: "https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/users/introduction/"
service: "Cloud Scale"
--------------------------------------------------------------------------------

# Users

### Introduction

It&#39;s important to remember the following details to implement and utilize the Users section effectively: 

* {{%badge%}}{{%bold%}}ZUID{{%/bold%}}{{%/badge%}}: {{%badge%}}ZUID{{%/badge%}} is the unique identification of a Zoho user account for individual application. It is automatically created for an end-user when they sign-up for your application.

* {{%badge%}}{{%bold%}}UserID{{%/bold%}}{{%/badge%}}: {{%badge%}}UserID{{%/badge%}} is the unique identification of an end-user, limited to Catalyst alone and not applicable to other Zoho services. This is also automatically created for an end-user when they sign up for your application.

* {{%badge%}}{{%bold%}}Org ID{{%/bold%}}{{%/badge%}}: {{%badge%}}Org ID{{%/badge%}} is the unique identification of the organization that an end-user belongs to. This identification is generated when the end-user is added through the {{%link href=&#34;/en/api/code-reference/cloud-scale/authentication/add-new-user/#AddNewUser&#34; %}}Add User API{{%/link%}} or through the {{%link href=&#34;/en/cloud-scale/help/authentication/user-management/users/implementation/#adding-a-new-user-from-the-console&#34; %}}Add User{{%/link%}} button in the console. If the Org ID is not specified while adding the user, Catalyst will automatically generate a unique Org ID for that particular user. 
{{%note%}}{{%bold%}}Note:{{%/bold%}}The organization of a user cannot be changed later, once it is associated with their account.{{%/note%}}

* An end-user can sign up to any number of Catalyst applications; a unique ZUID and Org ID will be created each time for that user. However, this could also cause inconvenience for the user, as they would have to sign in every time they switch to a different Catalyst application. To prevent this, if you implement a {{%link href=&#34;/en/cloud-scale/help/authentication/native-catalyst-authentication/introduction/&#34; %}}Native Catalyst Authentication type{{%/link%}} in all of your Catalyst applications, you can easily set up {{%link href= &#34;/en/cloud-scale/help/authentication/social-logins/introduction/&#34; %}}Social Logins{{%/link%}} that will allow users to sign up to all your applications using credentials of trusted Identity Providers (IdPs).

{{%note%}}{{%bold%}}Note:{{%/bold%}} Catalyst&#39;s {{%link href=&#34;/en/api/introduction/multi-org-support/#Multi-OrgSupport&#34; %}}Multi-Org feature{{%/link%}} enables a Catalyst developer to be a part of multiple organizations, while registered with one Catalyst account. This means that if a user or a {{%link href=&#34;/en/getting-started/set-up-a-catalyst-project/collaborators/&#34;%}}collaborator{{%/link%}} signs up for more than one Catalyst organization, they are assigned a different Org IDs under one ZUID for each application.{{%/note%}}

&lt;br /&gt;

--------------------------------------------------------------------------------
title: "Benefits"
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: "2026-03-18T07:41:08.537Z"
source: "https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/users/benefits/"
service: "Cloud Scale"
--------------------------------------------------------------------------------


# Benefits

* Authentication provides an integrated space to manage application users and handle all end-user activities. The provision to handle user accounts directly from the Catalyst console, rather than creating additional solutions for it, is highly helpful and time saving. 

* Even if you have included a provision for users to create an account or reset their password from inside your application, you can still perform these activities quickly from the console for your convenience. 

* You can easily manage applications created for internal usage by your organization&#39;s members, or that are made accessible by request only using Authentication.

* You can create custom user roles for your end-users, and provide them with more specific permissions.

&lt;br /&gt;

--------------------------------------------------------------------------------
title: "Implementation"
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: "2026-03-18T07:41:08.537Z"
source: "https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/users/implementation/"
service: "Cloud Scale"
--------------------------------------------------------------------------------


# Implementation

### Adding a New User From The Console

1. Navigate to the *User Management* section of **Cloud Scale &gt; Authentication** and click **Add User** in the *Users* section.
&lt;br /&gt;

{{%note%}}{{%bold%}}Note:{{%/bold%}} To add end-users to your application, you must first enable at least one of the {{%link href=&#34;/en/cloud-scale/help/authentication/introduction/&#34; %}}authentication types{{%/link%}}.{{%/note%}}

2. Enter the **First Name**, **Last Name**, **Email ID** of the user. Select the **Role** or the user from the *Roles* drop-down list in the pop-up window.
&lt;br /&gt;

{{%note%}}{{%bold%}}Note:{{%/bold%}} You can find out more about {{%italics%}}Roles{{%/italics%}} from this {{%link href=&#34;/en/cloud-scale/help/authentication/user-management/roles/implementation/&#34; %}}help section{{%/link%}}{{%/note%}}

3. If you wish to add the user under a particular organization, enter the Org ID. If you do not enter one, Catalyst will generate a unique organization ID for the user.
&lt;br /&gt;

4. Select the platform of the application that you are inviting the user to access.
&lt;br /&gt;
{{%note%}}{{%bold%}}Note:{{%/bold%}} Specifying the platform does not prevent the user from accessing other platforms of the application. However, it defines the primary platform that the user will access from their device and sets default values for opening the application in the appropriate medium.{{%/note%}}
If you select {{%bold%}}Andorid{{%/bold%}} or {{%bold%}}iOS{{%/bold%}} as the platforms, you can type in the redirect URL.
    &lt;br /&gt;

5. You can use the default homepage that you have specified in your web app&#39;s {{%link href=&#34;/en/cli/v1/project-directory-structure/catalyst-json/&#34; %}}{{%badge%}}client-package.json{{%/badge%}}{{%/link%}} file as the redirect URL by checking the {{%bold%}}Use Default Redirect URL{{%/bold%}} checkbox. To use a different redirect URL, type the URL in the textbox.
&lt;br /&gt;
{{%note%}}{{%bold%}}Note:{{%/bold%}} Specifying the platform does not prevent the user from accessing other platforms of the application. However, it defines the primary platform that the user will access from their device and sets default values for opening the application in the appropriate medium.{{%/note%}}

6. Click {{%bold%}}Create{{%/bold%}}.
&lt;br /&gt;

The user will now be listed in the *Users* section along with their details. You can search for a particular user by their email address using the search bar. The *Users* section lists all users, including those who have signed up from inside the application. Click **Invite User** to add more users. 

When a new user is invited, Catalyst will send an automated email to their email address with a URL to set up their password. The content and design of this email template can be configured using the {{%link href=&#34;/en/cloud-scale/help/authentication/email-templates/introduction/&#34; %}}Email Template{{%/link%}} feature of Authentication. 

When the user clicks on the link, they will be authenticated and redirected to a page that requests them to set their password.
&lt;br /&gt;

Once the user completes the process, they are redirected to the redirect URL that you specified while inviting the user.

### Enable or Disable a User

You can enable or disable a user of your application as you need. When a user is disabled for an application, they will no longer be able to login to the application until you enable them again.

To enable or disable a user, click the toggle switch in the *Status* column of that user.
&lt;br /&gt;

### Reset a User&#39;s Password

You can easily reset a user&#39;s password by sending them a Password Reset email from the Catalyst console. The email will contain a password reset link, which the user can click to create a new password for the application. The Password Reset email can be designed per your preference using the {{%link href=&#34;/en/cloud-scale/help/authentication/email-templates/introduction/&#34; %}}Email Template{{%/link%}} feature of Authentication.

If you are implementing {{%link href=&#34;/en/cloud-scale/help/authentication/native-catalyst-authentication/hosted-authentication-type/introduction/&#34; %}}Hosted Authentication Type{{%/link%}}, you also have the option of designing the Password Reset page of your application directly in the console.

{{%note%}}{{%bold%}}Note:{{%/bold%}} The password will be reset for all platforms, irrespective of the platform you choose. Specifying the platform sets default values for opening the application in the appropriate medium.{{%/note%}}

To let user reset their password:

1. Click the ellipsis icon at the corner of the particular user, and click **Reset Password**.
&lt;br /&gt;

2. Select the platform of the application for which the password is to be reset in the *Redirect Details*
&lt;br /&gt; 

3. Click **Reset**.
&lt;br /&gt; 

This will automatically send a password reset email to the user&#39;s email address for the application platform that you have chosen.

When the user clicks on the link, they will be redirected to the Password Reset page of your application where they can create a new password for their account.

{{%note%}}{{%bold%}}Note:{{%/bold%}} You can also send a password reset email using {{%link href=&#34;/en/sdk/java/v1/cloud-scale/authentication/reset-password/&#34; %}}Java{{%/link%}}, {{%link href=&#34;/en/sdk/nodejs/v2/cloud-scale/authentication/reset-password/&#34; %}}Node.JS{{%/link%}}, {{%link href=&#34;/en/sdk/python/v1/cloud-scale/authentication/reset-password/&#34; %}}Python{{%/link%}}, {{%link href=&#34;/en/sdk/web/v4/cloud-scale/authentication/reset-password/&#34; %}}Web{{%/link%}} SDKs, or the {{%link href=&#34;/en/api/code-reference/cloud-scale/authentication/reset-user-password/#ResetUserPassword&#34; %}}API{{%/link%}}.{{%/note%}}

### Modify a User&#39;s Details

You can modify and update a user&#39;s name or the role that they were assigned to. However, you will not be able to change a user&#39;s registered *email address*, *Org ID*, or *User ID*.

To modify user information in your application:

1. Click the **ellipsis icon** of the user whose information you wish to modify and select **Edit**.
&lt;br /&gt; 

2. Make any necessary changes in the pop-up widow and click **Update**.
&lt;br /&gt; 

### Delete a User

You can permanently delete a user from logging in to your application. The user will need to re-register in your application if they want to use it again.

To delete a user account from your application:

1. Click the **ellipsis icon** for the user you wish to delete and select **Delete**.
&lt;br /&gt; 

2. Click **Yes, Proceed** in the confirmation window.
&lt;br /&gt; 

&lt;br /&gt;