User Management
Tenant administrators manage who can access Monozu and which groups grant permissions.
Prerequisites
Section titled “Prerequisites”settings.users.manageandsettings.users.read(Admin has full access)module.settings
Invite a user
Section titled “Invite a user”-
Open Settings → Users (
/settings/users). -
Click Invite user and enter email address.
-
The user receives an email with a link to
/invite/:tokento set password or complete SSO onboarding. -
Assign groups that define module and resource permissions — see Groups & Roles.
Users enroll TOTP MFA at /mfa-setup when required. MFA is enforced on login and sensitive VPN operations per tenant policy.
Auth modes
Section titled “Auth modes”| Mode | Behavior |
|---|---|
| Standard | Email/password and/or Entra ID SSO |
| Restricted | SSO only + email domain allowlist |
Configure tenant auth under Settings → Authentication and Entra ID SSO.