Users
Learn how to create, manage, and audit users and their access in your Coder deployment.
On this page
By default, Coder is accessible via password authentication. For production deployments, we recommend using an SSO authentication provider with multi-factor authentication (MFA). It is your responsibility to ensure the auth provider enforces MFA correctly.
Configure SSO
- OpenID Connect (for example, Okta, KeyCloak, PingFederate, Azure AD)
- GitHub (or GitHub Enterprise)
Groups
Multiple users can be organized into logical groups to control which templates they can use. While groups can be manually created in Coder, we recommend syncing them from your identity provider.
Roles
Roles determine which actions users can take within the platform.
Typically, most developers in your organization have the Member role, allowing them to create workspaces.
Other roles have administrative capabilities such as auditing, managing users, and managing templates.
User status
Coder user accounts can have different status types: active, dormant, and suspended.
Active user
An active user account in Coder is the default and desired state for all users. When a user's account is marked as active, they have complete access to the Coder platform and can utilize all of its features and functionalities without any limitations. Active users can access workspaces, templates, and interact with Coder using CLI.
Dormant user
A user account is set to dormant status when they have not yet logged in, or have not logged into the Coder platform for the past 90 days. Once the user logs in to the platform, the account status will switch to active.
Service accounts are an exception. They don't log in, so Coder creates them as active by default and never marks them dormant.
Dormant accounts do not count towards the total number of licensed seats in a Coder subscription, allowing organizations to optimize their license usage.
Suspended user
When a user's account is marked as suspended in Coder, it means that the account has been temporarily deactivated, and the user is unable to access the platform.
Only user administrators or owners have the necessary permissions to manage suspended accounts and decide whether to lift the suspension and allow the user back into the Coder environment. This level of control ensures that administrators can enforce security measures and handle any compliance-related issues promptly.
Similar to dormant users, suspended users do not count towards the total number of licensed seats.
Create a user
To create a user with the web UI:
- Log in as a user admin.
- Go to Users > New user.
- Enter the Username, Email, and Password.
- Select Save.
The new user appears in the Users list. You can assign roles on this page before you save, or later from the user's actions menu.
To create a user via the Coder CLI, run:
coder users createWhen prompted, provide the username and email for the new user.
You'll receive a response that includes the following. Share the instructions with the user so that they can log into Coder:
Download the Coder command line for your operating system:
https://github.com/coder/coder/releases/latest
Run coder login https://<accessURL>.coder.app to authenticate.
Your email is: [email protected]
Your password is: <redacted>
Create a workspace coder create !Suspend a user
User admins can suspend a user, removing the user's access to Coder.
To suspend a user via the web UI:
- Go to Users.
- Find the user you want to suspend, select the vertical ellipsis to the right, and select Suspend.
- In the confirmation dialog, select Suspend.
To suspend a user via the CLI, run:
coder users suspend <username|user_id>Confirm the user suspension by typing yes and pressing enter.
Activate a suspended user
User admins can activate a suspended user, restoring their access to Coder.
To activate a user via the web UI:
- Go to Users.
- Find the user you want to activate, select the vertical ellipsis to the right, and select Activate.
- In the confirmation dialog, select Activate.