Manage users and permissions

Add users to your Amplitude organization before they can access any Amplitude projects. Do this immediately after creating an organization.

Manage new users and user access

Manage users from the Members page. Navigate to Settings > Organization settings > Members & Groups.

At the top of the page, find an overview of users for your organization: total users, joined users, pending users, and users requesting access.

Invite new users

Organization-level Admins and Managers can remove users from the organization. Organization-level Admins and Managers can invite new users to the organization; project-level Admins and Managers can also invite new users when their roles include the right permissions. Members can invite users to team spaces but can't add users to the organization.

To invite new users to the organization:

1. From the Members page, click Invite New Users. The Invite New Users modal appears.
2. Type the new user’s email address into the text box. You can add more than one email address at a time. Press the Enter key after each email address you type.
3. For each email you entered, select the appropriate team. Then click Next.
4. If you are an Enterprise customer with Groups enabled, choose the group or groups this user belongs to from the Select Groups drop-down menu. The user inherits all the project permissions of those groups. Then click Next.
5. Select the individual projects the user has access to. For each project, choose the appropriate role from the drop-down menu on the right. If you’ve assigned the user to a group in the previous step, you can't downgrade those permissions here. Then click Next.
6. Specify the user's default project and select the appropriate team spaces for them. The default project sets the user's dropdown menus to that project when they first log into Amplitude. The team spaces appear under Team Spaces in the left-hand rail when the user logs into Amplitude. Then click Next.
7. Review your invitation. If it’s ready to go, click Send.

Allow team members to request access

You can allow team members to request access to the organization from the login page. Access requests prompt admin approval.

To turn this setting on, navigate to Advanced Settings and switch the Allow Team Members to Request Access toggle to Enabled.

Change an Amplitude email address

Email addresses are unique identifiers for Amplitude user accounts. Neither users nor administrators can change a user account's email address.

To work around this limitation:

1. Invite your new email address to your Amplitude organization.
2. Create your new Amplitude account with your new email address.
3. Log in with your existing email address and transfer ownership of all content to your new email address.
4. Remove your old email address from your Amplitude org.

Change user roles and permissions

The Joined Users view shows all current users. Pending Users shows users with an outstanding invite. An admin or manager can adjust any user's organization role or permissions with the dropdown menu in the Role column. Enterprise and Growth customers with project-level permissions enabled must select the checkbox next to a user's name to manage individual permissions.

To change user permissions in Amplitude:

1. Navigate to Settings > Organization settings > Members & Groups. The Team Members page opens.
2. Check the box next to the name of the user whose permissions you want to edit. You can select multiple users at once.
3. Click Manage Project Access.
4. In the modal that appears, find the project you want to adjust permissions for and check the checkbox next to it. You can select multiple projects at once.
5. From the Role dropdown, choose the new permission level you want to assign to the selected users for each selected project.

6. To remove a user from the organization, click Remove. This removes the user from the organization and eliminates all access provisions. Removing a user from the organization requires an organization-level Admin or Manager role.

Project-level permissions

With project-level permissions, a user can have a different role for each project within an organization. This enables multiple teams in your company to operate autonomously and manage their own datasets. For example, a user may have Manager-level permission in one project and Viewer-level permission in another. Users without access to a project can't view content that belongs in that project.

When viewing all members of your organization, Amplitude lists members as either User or Admin. If you're an Admin or Manager of a project in the organization, you can use Manage Project Access to grant, remove, or modify an existing organization member's access for projects you manage. Project-level Admins and Managers can only modify a user's project access for projects they manage.

Reach out to your Customer Success Manager to enable project-level permissions, as this isn't enabled by default.

Transfer ownership of content from one user to another

When a user leaves the company or exits an Amplitude organization, any content they created no longer has an owner. Depending on the content, this can significantly hinder your company's analytics work.

Admins can avoid this by using the bulk transfer ownership feature to designate another user as the owner of that orphaned content. Navigate to Settings > Organization settings > Members & Groups, and then click Bulk Transfer Edit Access.

You can also transfer content when you're removing a user. Check the box on the Remove Members? modal, and Amplitude provides the option to transfer each removed user's content to another existing user.

You can only transfer a user's content before they're deleted from the organization. The user who receives the content must have logged into Amplitude at least one time in the previous 30 days. You may have to explicitly grant them the permissions they need to access the transferred content.

Request an email domain change

Before an email domain migration:

• Migrated items: Permission levels including App-Level Permissions, Admin Status, and Group Membership; and content including Cohorts, Charts, Dashboards, and Notebooks.
• Non-migrated items: User spaces and the content contained within these spaces.
• Active user impact: Anyone in an active session redirects to an error page. Let your team know they may not have access to Amplitude during the domain change.
• Turn off SSO: If you have SSO enabled in your organization, turn it off before the migration. You have to set up SSO again after the migration.

To request an email domain change, submit a ticket with the following information:

• Your org ID.
• The old email domain.
• The new email domain.

An admin must request email domain changes. If you aren't an admin of the organization, CC an admin in your request.