--- title: "Manage Project users in the Identity Access Manager" description: "How people are registered in a Project, as team members of your organization or as application end-users" url: https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-users lang: de lastUpdated: 2026-09-14 --- > For AI agents: the complete documentation index is available at https://docs.ovhcloud.com/de/llms.txt, the full documentation bundle is available at https://docs.ovhcloud.com/de/llms-full.txt. # Manage Project users in the Identity Access Manager ## Objective When a person is registered in a Project either as a **team member** (i.e. connected using their Data Platform account and part of your organization) or as an **application end-user** (i.e. connected via the embedded authentication service of the Project), they will be found in the _Users_ tab of the Identity Access Manager. On Data Platform, each user is identified by their **email address**, which must be unique to them. ## Organization IAM users vs. Project IAM users The users in the Organization IAM correspond to all your team members who have access to the platform and who can potentially access the organization's resources. These users are managed in the same way as the Project IAM users, with the sole difference that there is no distinction between team member users and end-users. All users in the Organization IAM are team members with access to Data Platform. On the other hands, users in the Project IAM can be either team members with access to the services/resources within a project ([Data Processing Engine](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/landing-page-dpe.md), [Analytics Manager](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/landing-page-analytics-manager.md), etc) or end-users who only have access to the applications and dashboards. End-users are not a part of the organization, hence they do not exist in the Organization IAM and do not have access to the platform itself. As a rule of thumb: - If you want to add a team member to work with you on Data Platform: **add them in the Organization IAM**. Then make sure to grant permissions either at organization-level or project-level through roles and groups. - If you want to grant access to an app or a dashboard to a end-user, **add them in the Project IAM**. ### Manage Organization IAM users All team members that need to work on Data Platform **MUST be added** in the Organization's IAM. To add someone in the Organization's IAM, head to the _Users_ tab of the Organization IAM, and click on **Invite users**. ![add team member](/images/public-cloud/data-platform/product/iam/users/picts/new_add-user-orgalevel.png) :::info Make sure to grant permissions to the new user by binding them a role or adding them to a group. ::: - [ Add users to a group](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-groups.md#assign-users-or-service-accounts-to-a-group) - [ Assign a role to a user](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-organization.md#resources-managed-by-the-organization-iam) ### Manage Project IAM users The _Users_ tab of the Project IAM lists all users that can get access to your Project. These are either: - [Team members](#team-members) from your organization - [End-users](#application-end-users) that can open your applications ![iam](/images/public-cloud/data-platform/product/iam/users/picts/new_users.png) #### Team members Your team members are the people with whom you work on data Projects in the Project. They must [have a Data Platform account](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/manage-organizations-signin-signup.md) and [be part of your organization](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/manage-organizations.md) to open and edit the Project (i.e. they must exist in the users list of the Organization IAM). To add a new team member in your Project: 1. Click on **+ New User** 2. Type their email 3. Choose the _Team Member_ option ![add team member](/images/public-cloud/data-platform/product/iam/users/picts/new_add-user-teammember.png) Click on _Next_ and follow the instructions to add the new team member. This will automatically [add the user in the Organization IAM](#manage-organization-iam-users) first. :::info Members that are _Admin_ in an organization will also have full _Admin_ rights in the Identity Access Managers of all Projects in this organization. Members that are added as _User_ in an organization will need to have their permissions added manually, either by placing them in a [group](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-groups.md) or by assigning them a [role](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-roles-conditions.md) directly. Furthermore, if a user is added as _Project Admin_ in the Organization IAM, they will be added as _Admin_ in the _Project IAM_. ::: - [ Add users to a group](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-groups.md#assign-users-or-service-accounts-to-a-group) - [ Assign a role to a user](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-roles-conditions.md#bind-a-role-to-a-user-service-account-or-group) #### Application end-users The end-users that you are building the application for don't need a Data Platform account to connect. Your Project comes with an [internal authentication service](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-auth-providers.md#project) that uses an email and password. To add an end-user in your Project, click on **New User**. ![iam](/images/public-cloud/data-platform/product/iam/users/picts/new_new-user1.png) You must enter an email for the end-user, as it will be their default authentication method. :::info All information entered in the Identity Access Manager, including phone number and email address, is securely stored in the Project and cannot be accessed by Data Platform. It is for your own internal usage and will never be used for marketing purposes. ::: ![iam](/images/public-cloud/data-platform/product/iam/users/picts/new_new-user2.png) :::info By default, new end-users don't have any access right. You will need to either place them in [groups](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-groups.md) or assign them [roles](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-roles-conditions.md) directly. ::: - [ Add users to a group](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-groups.md#assign-users-or-service-accounts-to-a-group) - [ Assign a role to a user](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/iam-roles-conditions.md#bind-a-role-to-a-user-service-account-or-group) ## Generate an API & secret key for a user Whenever you need to trigger specific jobs (such as launching workflows) from outside of Data Platform, you will need to generate an API and a secret key to authenticate. [ Generate API & secret keys for users](https://docs.ovhcloud.com/de/guides/public-cloud/data-platform/tutorials-generate-api-keys.md) ## Go further If you need training or technical assistance to implement our solutions, contact your sales representative or click on [this link](https://www.ovhcloud.com/de/professional-services/) to get a quote and ask our Professional Services experts for a custom analysis of your project. Ask questions, give your feedback and interact directly with the team building the Data Platform on the dedicated [Discord channel](https://discord.gg/ovhcloud). If you need support with your OVHcloud services, create a request in our [Help Centre](https://help.ovhcloud.com/csm?id=csm_get_help). Join our [community of users](https://community.ovhcloud.com/).