Member Management

System administrators can view and manage all organization members from the Members page, including their groups, permissions in each workspace, member status, creation date, and last active date.

​

Managing Members

​

Manual Management

​

Add New Members to Your Team

If your team doesn’t use SSO authentication, members can log in with username and password. Click the Add button in the top right corner, then enter the username and email. The system displays the default login password when adding a member for the first time. To add administrators to your team, see System Administrator Settings.

​

Add New Members to Workspaces

To add members to a specific workspace, check out Workspace Management.

​

Disable Members

Disabling members is better than deleting them—it preserves their data while denying access. Click the menu button next to a member and switch their Status to “banned” to disable them.

​

Reset Member Passwords

When members forget their passwords, system administrators need to send password reset emails manually. Click the menu button next to a member and select Reset Password.

​

Delete Members

⚠️ Warning: Deleting a member removes all their applications and usage data. Be careful with this action.

Click the menu button next to a member and select Delete to remove them.

Note: Once added to a workspace, members can’t be removed from it. Clicking Delete on the Members page removes them from the entire team.

​

Search for Members

Administrators can search for users by workspace ID or email address, and filter by user status.

​

Automatic Management

Dify Enterprise Edition supports automatic synchronization of your existing department and personnel structure through the SCIM (System for Cross-domain Identity Management) standard, making it easier to manage large-scale organizations.

Automatic Member Sync

Automatically sync organization members through the SCIM standard.

​

Permission Management

Each member has permissions at both the team level and workspace level. Team administrators can add regular members, invite new system administrators, and assign workspace permissions to members.

​

Team-Level Permissions

• Team Members

Users added from the Members page have regular member permissions by default.

These members can:

• Log in and use Dify Enterprise Edition

• System Administrators

Users added from the Settings page have system administrator permissions by default. For more about system administrator operations, see System Settings.

These members can:

• Access the enterprise management dashboard
• Add, delete, or disable team members
• Add members to workspaces and assign permissions

​

Workspace-Level Permissions

Workspaces have five permission groups: Owner, Admin, Editor, Normal, and Knowledge Admin.

• Owner

The workspace creator. Each workspace has only one Owner who can create and edit all applications in the workspace. They can access settings to add model providers, create API extensions, and more.

• Admin

Workspace administrators. Each workspace can have multiple admins who can create and edit all applications in the workspace. They can access settings to add model providers, create API extensions, and more.

• Editor

Members who can create and edit applications in the workspace. They cannot access settings to add model providers or manage workspace members.

• Normal

Regular workspace members. Each workspace can have multiple normal members who can only use applications within the workspace, not edit or modify them. They cannot access settings to add model providers or create API extensions.

• Knowledge Admin

Members who can only create and edit knowledge bases within the workspace. They cannot create, edit, or use applications. They cannot access settings to add model providers or create API extensions.

​

Group Management

In Dify Enterprise Edition, group management controls member access to different resources within your organization. By organizing members into different groups, you can effectively control which users access which Web Apps, preventing resource misuse or potential data leaks while ensuring information security.

​

Manual Sync Groups

​

Create Groups

Click Group Management in the top right corner of the Members page, enter a group name to create it. Group names must be unique.

​

Edit Groups

Groups support renaming and reordering by dragging. Click the Edit button next to a group name to rename it. Names cannot duplicate existing groups.

​

Assign Users to Groups

Click the menu button next to a member → Edit Groups, then select the groups they should join. Each user can belong to multiple groups.

After assigning users to groups, see Application Publishing: Access Permission Management to learn how to control Web App access permissions.

​

Automatic Sync Group

Through the SCIM standard, Dify Enterprise Edition supports automatic synchronization of existing user groups from your IdP. For detailed configuration instructions, see: