---
updatedAt: 2026-07-16T20:45:57.000Z
---

# User management | EPM-WM Pathfinder

> ℹ️
>
> You must be an administrator to access site management features.

Pathfinder supports a one-to-one relationship between a user and an organization. One email address can belong to only one organization. The workaround is to use email aliases (for example, <example+alias@email.com>) which can also be used with SAML as long as the IdP supports + addressing.

## How user accounts are created

Pathfinder users are created one of three ways:

* **Invite:** Creates a local account. If the invited email uses an Org ID suffix, the account is treated as AD/LDAP and cannot authenticate with local username/password.
* **JIT via SAML:** Account is created on first SSO login.
* **SCIM provisioning:** Account is created by the IdP; treated as federated only if the email domain matches a configured SAML provider.

A user's "local" vs. "federated" status is not permanent. It's reevaluated at every login based on email domain match to a configured SAML provider. AD/LDAP accounts are the exception: they can only authenticate through the directory proxy and can't fall back to local or SAML.

## Invite a user to a site

1. Sign into **app.beyondtrust.io**.\
   The **BeyondTrust Home** page displays.

2. At the top right of the page, click your site name to display a drop-down menu.

3. Select **Administration**.\
   The **BeyondTrust Platform Administration** page displays.

4. From the top left of the page, click ![](https://files.readme.io/dc5ec6ab65e7970de9db2b13707e2dd57a4617f070203d9609de96d5b09f935e-menu-icon.png) **> Administration > User Management**.\
   The **Organization Users** page displays.

5. Click **Invite User**.\
   The **Invite User** page displays.

6. In the **User Details** section, enter an **Email Address**, **First Name**, and **Last Name**. All fields are required.

7. In the **User Permissions** section, for **Organization Role**, select either **Standard User** or **Administrator**.

8. For **Site Access**, select the sites and at least one application to grant user access to.

[block:image]
{
  "images": [
    {
      "image": [
        "https://files.readme.io/19efe5df1379e81e05490c74914b02582a3f343756071076698e49aa1da02234-invite-user.png",
        "",
        "The User Invite page in BeyondTrust Pathfinder platform."
      ],
      "align": "center"
    }
  ]
}
[/block]

9. Click **Invite User**.\
   The user receives an email with a link to create a new password, then access the selected site(s) and application(s).

## Edit a user's details

> 🚧 Important information
>
> To change a user's email, contact BeyondTrust Support

1. Sign into **app.beyondtrust.io**.\
   The **BeyondTrust Home** page displays.
2. At the top right of the page, click your site name to display a drop-down menu.
3. Select **Administration**.\
   The **BeyondTrust Platform Administration** page displays.
4. From the top left of the page, click ![](https://files.readme.io/dc5ec6ab65e7970de9db2b13707e2dd57a4617f070203d9609de96d5b09f935e-menu-icon.png) **> Administration > User Management**.\
   The **Organization Users** page displays.
5. Locate the user you want to edit.
6. Click ![](https://files.readme.io/e46c9e27362751b8fa821034d5c6fba45f7f915b4ca99704a030604b63c3378b-icon-actions.png) **> Edit User**.\
   The **Edit User** page displays.
7. Edit the user's first and/or last name.
8. Click **Save Changes**.\
   The changes update immediately.

## Change a user's access and permission levels

1. Sign into **app.beyondtrust.io**.\
   The **BeyondTrust Home** page displays.
2. At the top right of the page, click your site name to display a drop-down menu.
3. Select **Administration**.\
   The **BeyondTrust Platform Administration** page displays.
4. From the top left of the page, click ![](https://files.readme.io/dc5ec6ab65e7970de9db2b13707e2dd57a4617f070203d9609de96d5b09f935e-menu-icon.png) **> Administration > User Management**.\
   The **Organization Users** page displays.
5. Locate the user you want to edit.
6. Click ![](https://files.readme.io/e46c9e27362751b8fa821034d5c6fba45f7f915b4ca99704a030604b63c3378b-icon-actions.png) **> Edit User**.\
   The **Edit User** page displays.
7. In **User Permissions**, select a role from the list.
8. Optionally, select specific sites and associated applications for the user to access.
9. Optionally, deselect specific sites and associated applications you no longer want the user to access.
10. Click **Save Changes**.\
    The access and/or permissions update.

## Delete a user

> 🛑 Warning
>
> Deleting a user is an unrecoverable operation. The user access is immediately revoked from all sites and associated applications.
>
> Alternatively, you can [change a user's permissions and access levels](https://docs.beyondtrust.com/epm-wm/docs/user-management#change-a-users-access-and-permission-levels).

1. Sign into **app.beyondtrust.io**.\
   The **BeyondTrust Home** page displays.
2. At the top right of the page, click your site name to display a drop-down menu.
3. Select **Administration**.\
   The **BeyondTrust Platform Administration** page displays.
4. From the top left of the page, click ![](https://files.readme.io/dc5ec6ab65e7970de9db2b13707e2dd57a4617f070203d9609de96d5b09f935e-menu-icon.png) **> Administration > User Management**.\
   The **Organization Users** page displays.
5. Locate the user you want to delete.
6. Click ![](https://files.readme.io/e46c9e27362751b8fa821034d5c6fba45f7f915b4ca99704a030604b63c3378b-icon-actions.png) **> Delete User**.\
   A confirmation message displays.
7. Type **delete** into the text field.
8. Click **Delete**.\
   The user is immediately deleted and access to all sites and applications is revoked.