User Management

Kabware uses role-based access control to manage who can do what within your organisation.

Roles

Role	Scope	Capabilities
SuperAdmin	System-wide	Full access to all tenants, system settings, and platform configuration
TenantAdmin	Organisation	Manage assistants, users, billing, and settings for their organisation
Member	Organisation	Chat with assistants they have access to

SuperAdmin

SuperAdmins have unrestricted access across the entire platform. This role is typically reserved for Kabware platform operators.

TenantAdmin

TenantAdmins manage a single organisation (tenant). They can:

• Create and configure digital assistants
• Invite and remove team members
• Assign roles to users
• View usage analytics and billing
• Manage organisation settings

Member

Members are regular users who can chat with the assistants available to them. They cannot access the admin dashboard or modify any settings.

Inviting users

To add a new user to your organisation:

1. In the admin dashboard, go to Users.
2. Click Invite User.
3. Enter their email address and select a role (TenantAdmin or Member).
4. Click Send Invitation.

The user receives an email invitation with a link to join your organisation. They sign in using the same passwordless OTP flow.

Seat limits

The number of users you can invite depends on your plan:

Plan	Maximum seats
Standard	10
Professional	50
Enterprise	Custom

Removing users

1. Go to Users in the admin dashboard.
2. Find the user you want to remove.
3. Click Remove and confirm.

Removing a user revokes their access immediately. Their chat history is retained unless you explicitly delete it.

Organisation (tenant) setup

Each organisation on Kabware is called a tenant. When you sign up, a tenant is created automatically with your organisation name.

Tenant settings

TenantAdmins can configure:

• Organisation name — Displayed in the admin dashboard and communications.
• Custom domain — (Enterprise plan) Use your own domain for chat URLs.
• AI provider — Choose which AI model provider and model to use.
• Default settings — Defaults that apply to all assistants unless overridden.

Multi-tenant isolation

Each tenant's data is fully isolated:

• Users in one organisation cannot see data from another.
• Assistants, files, and chat history are scoped to the tenant.
• Billing is tracked separately per tenant.