# User Management

### User roles & permissions

Each Spara user has a role. By default, users join as the lowest-level role, Member. Sensitive actions are restricted to higher level roles.

User roles may be updated in [Settings > Team](https://app.spara.co/organization/team).

<table data-full-width="true"><thead><tr><th>Role</th><th>Agents</th><th>Workflows</th><th>Manual Mode</th><th>Settings > General</th><th>Settings > Team</th><th>Settings > Integrations &#x26; Webhook</th></tr></thead><tbody><tr><td>Member</td><td>View-only</td><td>View-only</td><td>Yes</td><td>Hidden</td><td>View-only</td><td>Hidden</td></tr><tr><td>Integrator</td><td>View-only</td><td>View-only</td><td>Yes</td><td>Full access</td><td>View-only</td><td>Full access</td></tr><tr><td>Editor</td><td>Full access</td><td>Full access</td><td>Yes</td><td>Full access</td><td>View-only</td><td>View-only</td></tr><tr><td>Manager</td><td>Full access</td><td>Full access</td><td>Yes</td><td>Full access</td><td>Full access</td><td>Full access</td></tr></tbody></table>

**Workflows.** Roles with Full access to Workflows can create, edit, publish, and delete workflows. View-only roles can open a workflow to inspect its configuration but cannot make changes.

**Manual Mode.** Manual Mode lets any user take over a live conversation from the AI agent — they can pause Spara's responses and respond to the lead directly. Manual Mode is available to all roles regardless of permission level.

### Inviting team members

New users may be invited in [Settings > Team](https://app.spara.co/organization/team). Click the "Invite" button to enter their email address, assign them a role, and send them an invitation to the Spara platform.

### Authentication methods

Spara leverages [Clerk](https://clerk.com) for best-in-class user authentication & security.

By default, Spara customers' users may authenticate with email address and password. You may also elect to enable enterprise SSO (SAML, OAuth 2.0, and OpenID Connect) or social SSO for user authentication.

For enterprise SSO, Spara supports:

* Okta
* Microsoft Active Directory
* Google Workspace
* Sign in w/ Google
* Sign in w/ Github

Spara supports SSO/SAML authentication as well as email/password authentication. In the case of email/password authentication Spara requires the password to be:

* At least 8 characters long.
* At least one uppercase character
* At least one lowercase character
* At least one number
* Not be a known compromised password

{% hint style="info" %}
Contact your CSM to enable SSO for your organization.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.spara.com/platform/settings/user-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.