User Management

Users can be managed within Dremio or externally through third-party identity providers. A user’s email address is used as the unique identifier in Dremio Cloud and cannot be changed after the user has been created. Unless otherwise specified, users are assigned the PUBLIC role upon creation.

User Types

Dremio recognizes internal and external user types.

Internal Users

Users who set up a password for authentication within Dremio are internal users. These users’ credentials are managed through Dremio.

External Users

External users are created and managed by an external application like an Identity Provider. These users need to be manually invited or provisioned using the System for Cross-domain Identity Management (SCIM). When properly configured, your OpenID Connect (OIDC) provider provisions users into your Dremio Cloud organization. Once users are provisioned into Dremio via SCIM, they can authenticate with their enterprise IDP configured in your Dremio organization. The SCIM provisioning feature can also update user attributes and deactivate users in Dremio.

Dremio stays in sync with the identity provider when SCIM is configured. If a user is deleted from the identity provider, this will be reflected in Dremio. User credentials for external users cannot be changed from within Dremio because they are controlled by the Identity Provider.

See Configure SCIM Provisioning with Microsoft Entra ID or Configure SCIM Provisioning with Okta for more information and instructions for configuring secure user management using these OIDC providers.

Managing Your Information

Depending on user type, users can view and update selected account information within Dremio.

Updating Your Password

Since passwords for external users are managed by your identity provider, they cannot be changed within Dremio. See your organization's authentication administrator for assistance managing your password.

If you are an internal user, you can reset your password within Dremio using one of the following options:

• If you're locked out of your Dremio account, enter your email on the login screen and click the Forgot Password? link. Dremio will send you an email to reset your password.
• If you're logged in to Dremio:
  • Hover over the user icon at the bottom of the navigation sidebar. Select Account Settings from the menu.
  • Click the Reset Password link. Dremio will send an email to reset your password.

Changing your password will end all existing Dremio Cloud web UI sessions.

Updating Your Name

You can edit your first and last name in Dremio:

1. Click the User icon (user initials) on the side navigation bar and select Account Settings.
2. On the General Information page, edit the First Name and Last Name fields.
3. Click Save.

Managing Other Users

Dremio administrators or users with the CREATE USER privilege can perform management tasks such as viewing, creating, editing, and deleting Dremio users.

Viewing All Users

To view all users in an organization:

1. Click the Organization icon in the side navigation bar.
2. Click the Settings icon at the top of the Organization page.
3. Select Users in the organization settings sidebar.

The table lists all existing users, both internal and external, with access to your instance of Dremio.

Adding a User

SCIM will add external users automatically from your identity provider.

To add an internal user:

1. Click the Organization icon in the side navigation bar.
2. Click the Settings icon at the top of the Organization page.
3. Select Users in the organization settings sidebar.
4. Click the Add Users button at the top-right corner of the page. This opens the Add Users dialog.
5. For Email address(es), enter the email address of each desired user to add, separated by a single comma, space, or line break. The email address specified here is used as the username and cannot be changed once the user has been added. If a user's email address changes, you must create a new user account with the new email address.
6. For Dremio Role, select the roles to assign. You can configure additional roles after users are created.
7. Click Add. An invite will be sent to each email address.

Editing a User

Dremio does not support editing user email addresses. If a user's email address changes, you must create a new user account with the new email address.

To edit a user:

1. Click the Organization icon in the side navigation bar.
2. Click the Settings icon at the top of the Organization page.
3. Select Users in the organization settings sidebar.
4. On the Users page, hover over the row of the user and click the Edit icon that appears next to the user.
5. (Optional) In the Details tab, edit the First Name and Last Name fields. Click Save.
6. (Optional) In the Roles tab, you can edit the roles that this user has been assigned. Click Save after you have added or removed roles.
   • To add one or more roles, search for and select the roles to assign to the user. Click Add Roles.
   • To remove a role, hover over the row of the role and click the Remove button.

Removing a User

Each user to be removed requires a separate action. Removing multiple users in one action is not supported.

To remove an external user:

1. Remove the user from your external identity provider.
2. Follow the steps for removing an internal user from Dremio.

To remove an internal user:

1. Click the Organization icon in the side navigation bar.
2. Click the Settings icon at the top of the Organization page.
3. Select Users in the organization settings sidebar.
4. On the Users page, hover over the row of the user that you want to remove. Click the remove icon.
5. Confirm that you want to delete the user.

Resetting A User Password

To send an email to an internal user for a password reset:

1. Click the Organization icon in the side navigation bar.
2. Click the Settings icon at the top of the Organization page.
3. Select Users in the organization settings sidebar.
4. Click the user and click the Send Password Reset link. An email will immediately be sent to the user to reset their password.