Skip to main content

User Management

Users can be managed locally via Dremio as well as externally through third-party identity providers. A user’s email address is used as the unique identifier in Dremio Cloud and cannot be changed after the user has been created. Users are assigned the PUBLIC role upon creation, unless otherwise specified. There are two different types of users in Dremio: Internal and External.

Internal Users​

Users that setup a local password for authentication to Dremio are considered internal users. These users’ credentials are managed through Dremio.

External Users​

External users are created and managed by an external application like an Identity Provider. These users need to be manually invited or provisioned using SCIM. User credentials for external users cannot be changed from within Dremio because they are controlled by the Identity Provider.

Dremio stays in sync with the identity provider when SCIM is configured. If a user is deleted from the identity provider, this will be reflected in Dremio.

SCIM​

Dremio supports System for Cross-domain Identity Management (SCIM) user provisioning feature. When properly configured, your OpenID Connect (OIDC) provider sends the credentials of assigned users securely through SCIM to your Dremio server and automatically creates Dremio user accounts with passwords for any new users. These new users may then log in to Dremio using their previously assigned credentials in your OIDC provider. The SCIM provisioning feature can also update user attributes and deactivate users in Dremio.

Read Configure SCIM Provisioning with Microsoft Entra ID or Configure SCIM Provisioning with Okta for more information and instructions for configuring secure user management using these OIDC providers.

note

You cannot reset or change an external user's password from Dremio. Passwords for external users are governed by your organization's credential manager.

Viewing All Users​

To view all users in an organization:

  1. Click the Organization This is the icon that represents the Organization settings. icon in the side navigation bar.
  2. Click the Settings This is the icon that represents the Organization settings. icon at the top of the Organization page.
  3. Select Users in the organization settings sidebar.

This screen lists all existing users with access to your instance of Dremio. Existing users may be managed externally or locally depending on your organization's configuration.

Adding a User​

note

These steps are to add local users. You can configure SCIM to add external users.

To add a user:

  1. Click the Organization This is the icon that represents the Organization. icon in the side navigation bar.
  2. Click the Settings This is the icon that represents the Organization settings. icon at the top of the Organization page.
  3. Select Users in the organization settings sidebar.
  4. Click the Add Users button at the top-right corner of the page. This opens the Add Users dialog.
  5. For Email address(es), enter the email address of each desired user to add, separated by a single comma, space, or line break. The email address specified here is used as the username and cannot be changed once the user has been added. If a user's email address changes, you must create a new user account with the new email address.
  6. For Dremio Role, select the roles to assign. You can configure additional roles after users are created.
  7. Click Add. An invite will be sent to each email address.

Editing a User​

If you're a user who has permissions to manage users across the organization, you can edit a user's first and last name as well as the roles assigned to specific users.

note

Dremio does not support editing user email addresses. If a user's email address changes, you must create a new user account with the new email address.

To edit a user:

  1. Click the Organization This is the icon that represents the Organization. icon in the side navigation bar.
  2. Click the Settings This is the icon that represents the Organization settings. icon at the top of the Organization page.
  3. Select Users in the organization settings sidebar.
  4. On the Users page, hover over the row of the user and click the Edit This is the icon that represents the Edit settings. icon that appears next to the user.
  5. (Optional) In the Details tab, edit the First Name and Last Name fields. Click Save.
  6. (Optional) In the Roles tab, you can edit the roles that this user has been assigned. Click Save after you have added or removed roles.
    • To add one or more roles, search for and select the roles to assign to the user. Click Add Roles.
    • To remove a role, hover over the row of the role and click the Remove button.

If you are an individual user (you do no have access to manage users across the organization), you can edit your first and last name. To edit your name:

  1. Click the User icon (user initials) on the side navigation bar and select Account Settings.
  2. On the General Information page, edit the First Name and Last Name fields.
  3. Click Save.

Removing a User​

note

To remove a local user, follow these steps. To remove an external user, first remove the user in your external identity provider before following these steps to manually remove the user from Dremio.

To remove a user:

  1. Click the Organization This is the icon that represents the Organization. icon in the side navigation bar.
  2. Click the Settings This is the icon that represents the Organization settings. icon at the top of the Organization page.
  3. Select Users in the organization settings sidebar.
  4. On the Users page, hover over the row of the user that you want to remove. Click the remove This is the icon that represents the Remove User settings. icon.
  5. Confirm that you want to delete the user.
note

Removing multiple users in one action is not currently suported.

Resetting Password​

If a local user needs to reset their password and you're a user who has permissions to manage users across the organization, you can send the user an email through which they can reset their password. To send an email for password reset:

  1. Click the Organization This is the icon that represents the Organization. icon in the side navigation bar.
  2. Click the Settings This is the icon that represents the Organization settings. icon at the top of the Organization page.
  3. Select Users in the organization settings sidebar.
  4. Click the user and click the Send Password Reset link. An email will immediately be sent to the user to reset their password.

If you are an individual user (you do no have access to manage users across the organization), you can reset your password with one of the following options:

  • If you're locked out of your account and need to reset your password, enter your email on the login screen. On the screen were you are prompted for a password, click the Forgot Password? link. An email will immediately be sent to you through which you can reset your password.
  • If you're logged in to the Dremio application and need to reset your password:
    • Hover over the user icon at the bottom of the navigation sidebar. Select Account Settings from the menu.
    • Click the Reset Password link. An email will immediately be sent to you through which you can reset your password.
caution

You can use special characters for any character in the password except the first character. If you use a special character for the first character in the password, the password will fail.