How to - Manage Users & Roles in Clavister IdAuth Cloud

Last modified on 18 May, 2026. Revision 34

This guide explains how to add, delete and manage users and roles to the Clavister Cloud Service for use by IdAuth Cloud.

The guide uses our example company ShieldIT as <tenant_name> through the different steps.

The guide assumes you are already enrolled as an administrator in the service.

Accessing Clavister Cloud Service

Access Clavister Clavister Cloud Service, example using ShieldIT below:

https://shieldit.sase.eu/


As an Admin you will now enter the Clavister Cloud Service and see any relevant features enabled for your tenant, select Users in the menu to see all users in the services.

Managing Users

Adding Users

Under Users, you will see all users, to add a new cloud user manually click + Add new.

 

It is essential for a user to have a valid email address and phone number in order to be able to enroll in the system. Once a user is added, they are ready to enroll by being provided with the following link.

https://iam.<tenant_name>.sase.eu/enroll/

Example:

https://iam.shieldit.sase.eu/enroll/

Editing Users

Under Users, select the user you would like to edit and you will can update the user details, when done, click save. 


Deleting Users

Under Users, you will see all users added to the system, select the the users to delete, this will allow you to delete these users.


Managing Roles

Adding Roles

Under Roles, you will see all roles, to add a new role click + Add new.

Adding Users to Roles

Under User, click on the user and assign the role(s) for that user.

Assigning External Groups/Users to Roles

If using an external directory like Entra ID or Google Workspaces, users in those directories can be added into roles by assigning external groups into the Role, this is done using the External Groups functionality found on the Role.

Dashboards 

Users & Authentication

Information about who are using the service can be seen by using the Users and Authentication dashboard, this can also be used to see if any user have problems on-boarding into the service.



Related articles

How to - Use Roles in IdAuth Cloud to limit user access to OneConnect
8 Feb, 2026 sase oneconnect core userauth oidc




Tagssase