> For the complete documentation index, see [llms.txt](https://docs.ilert.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ilert.com/users-and-access-management.md).

# Users & Access Management

- [User roles and permissions](https://docs.ilert.com/users-and-access-management/user-roles-and-permissions.md): The seven roles an ilert user can hold, what each one may do, and how to change a user's role.
- [Team-based organization](https://docs.ilert.com/users-and-access-management/teams.md): Use teams to manage who may see and change which resources, and to narrow the UI to the alerts and resources one team cares about.
- [Single sign on](https://docs.ilert.com/users-and-access-management/single-sign-on.md): Let your identity provider decide who can sign in to ilert, using SAML 2.0 or Google OAuth 2.0.
- [Setting up SSO with Google Workspace](https://docs.ilert.com/users-and-access-management/single-sign-on/setting-up-sso-with-g-suite.md): Use Google Workspace accounts to sign in to ilert over OAuth 2.0 — the shortest single sign-on setup ilert offers.
- [Setting up SSO with Microsoft Entra ID](https://docs.ilert.com/users-and-access-management/single-sign-on/setting-up-sso-with-azure-active-directory.md): Connect ilert to Microsoft Entra ID over SAML 2.0, including the claim change that makes ilert receive the right email address.
- [Setting up SSO with Okta](https://docs.ilert.com/users-and-access-management/single-sign-on/setting-up-sso-with-okta.md): Connect ilert to Okta over SAML 2.0, mapping each value Okta produces to the field in ilert that expects it.
- [Setting up SSO with Auth0](https://docs.ilert.com/users-and-access-management/single-sign-on/setting-up-sso-with-auth0.md): Connect ilert to Auth0 using the SAML2 Web App addon, including the settings object that makes Auth0 send the user's email address as the name ID.
- [Auto provisioning users & teams](https://docs.ilert.com/users-and-access-management/single-sign-on/auto-provisioning-users-and-teams.md): Have SAML attributes create ilert users and teams on first login, with the right role, contact details and team membership already in place.
- [Two-factor authentication / MFA](https://docs.ilert.com/users-and-access-management/two-factor-authentication-mfa.md): Protect an ilert account with an authenticator app or a security key, and know how to get back in when the device is lost.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ilert.com/users-and-access-management.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.