{"componentChunkName":"component---src-templates-markdown-template-jsx","path":"/guides/settings/platform/users/","result":{"data":{"pageMetadata":{"title":"mParticle Users and Roles","path":"/guides/settings/platform/users/","sourceCode":null,"metadataParent":{"title":"Platform","path":"/guides/settings/platform/","sourceCode":null,"hasVersionPicker":null,"metadataChildren":[{"title":"Platform Configuration","path":"/guides/settings/platform/platform-configuration/","order":1,"label":null},{"title":"mParticle Users and Roles","path":"/guides/settings/platform/users/","order":2,"label":null},{"title":"Key Management","path":"/guides/settings/platform/key-management/","order":3,"label":null},{"title":"Notifications","path":"/guides/settings/platform/notifications/","order":4,"label":null},{"title":"Audit Logs","path":"/guides/settings/platform/audit-logs/","order":5,"label":null}],"metadataParent":{"title":"Settings","path":"/guides/settings/","metadataChildren":[{"title":"Platform","path":"/guides/settings/platform/","order":1,"label":null},{"title":"Billing","path":"/guides/settings/billing/","order":4,"label":null},{"title":"Usage metering for value-based pricing (VBP)","path":"/guides/settings/usage/","order":5,"label":null}],"metadataParent":{"title":"Guides","path":"/guides/","metadataChildren":[{"title":"Platform Overview","path":"/guides/platform-overview/","order":0.5,"label":null},{"title":"Getting Started","path":"/guides/getting-started/","order":1,"label":null},{"title":"mParticle Agent","path":"/guides/mparticle-agent/","order":1.5,"label":null},{"title":"Oversight","path":"/guides/oversight/","order":2,"label":null},{"title":"Data Platform","path":"/guides/data-platform/","order":3,"label":null},{"title":"Data Warehouse","path":"/guides/data-warehouse/","order":4,"label":null},{"title":"Customer 360","path":"/guides/customer-360/","order":5,"label":null},{"title":"Analytics","path":"/guides/analytics/","order":6,"label":null},{"title":"Audiences","path":"/guides/audiences/","order":7,"label":null},{"title":"Settings","path":"/guides/settings/","order":8,"label":null},{"title":"Troubleshooting mParticle","path":"/guides/troubleshooting/","order":10,"label":null},{"title":"Default Service Limits","path":"/guides/default-service-limits/","order":11,"label":null},{"title":"Glossary","path":"/guides/glossary/","order":12,"label":null}],"metadataParent":null}}}},"markdownRemark":{"html":"\n

You can share access to your mParticle account via Users. Each user is given a role which determines their level of access to mParticle’s different features.

\n

\n \n \n \n \n \n \n \n Create and manage users

\n\n

To access your user settings:

\n
    \n
  1. Log into your mParticle account, hover your cursor over the Settings gear icon in the left hand navigation, and select Platform.
    2. \n
  2. You should be taken to the User Management tab by default. If not, select the User Management tab.
    3. \n
\n

The User Management page provides a list of all existing users created for your account. You can see each user’s full name, email address, assigned role, and whether they have single sign-on enabled.

\n

\n

To add a new user:

\n
    \n
  1. From the User Settings page, click Add User.
    2. \n
  2. Enter the first and last name of your user, and the email address you want to send the user invitation to.
    3. \n
  3. Use the Role dropdown to select the role you want to assign to the user. If you have created custom roles using the Custom Access Roles API, they will be displayed in the dropdown under Custom Roles. The standard roles will be listed under Standard Roles.
    4. \n
  4. Click Save.
    5. \n
\n

\n

To resend an invitation email to a user, or to delete a user, hover your cursor over the action menu icon for the user.

\n

\n

\n \n \n \n \n \n \n \n Roles

\n

mParticle offers several User Roles with different levels of access to mParticle.

\n

To see your own assigned role:

\n
    \n
  1. Hover your cursor over the Settings gear icon and select My Profile.
    2. \n
  2. You will see your assigned role under Profile Information.
    3. \n
\n

\n \n \n \n \n \n \n \n mParticle standard roles

\n

mParticle provides the following standard roles by default:

\n\n

\n \n \n \n \n \n \n \n Custom Access Roles API

\n

mParticle provides the Custom Access Roles API which mParticle account admins can use to create custom sets of permissions, or roles. You can then assign these custom roles to users of your account through the UI described above or with an API call. Learn more in the Custom Access Roles API developer documentation.

\n

\n \n \n \n \n \n \n \n Authenticating to mParticle with SSO and SAML

\n

mParticle uses Auth0 to authenticate logins to mParticle’s web UI. This allows you to create a SAML/SSO connection to an identity provider of your choice, such as Okta. Using SAML/SSO, or federated identity management and single sign-on authentication, improves your account’s overall security and the security of your customers’ data.

\n

To enable a SAML/SSO connection, you must collaborate with mParticle’s support team:

\n
    \n
  1. \n

    Contact mParticle support or your account representitive, and request an ACS (Assertion Consumer Service URL) and an EntityID.

    \n\n
    2. \n
  2. mParticle will configure an SSO tenant using the details you provided in step 1.
    3. \n
  3. Use the SSO tenant provided by mParticle to implement your existing authentication system and policies.
    4. \n
\n

\n \n \n \n \n \n \n \n Manage multi-factor authentication

\n

Multi-factor authentication (MFA) helps protect your mParticle account by requiring a second verification step when you sign in. You can manage your own MFA methods from your profile.

\n\n

To open your MFA settings, log in to the mParticle app for your pod and open My Profile. If your organization is in US1, you can use this direct link. For other pods, use the same path, /mp/userprofile, on your pod-specific app URL. To navigate manually:

\n
    \n
  1. Log into your mParticle account.
    2. \n
  2. Hover your cursor over the Settings gear icon in the left hand navigation.
    3. \n
  3. Select My Profile.
    4. \n
  4. Find the Multi-Factor Authentication section.
    5. \n
\n

\"My

\n

\n \n \n \n \n \n \n \n Supported MFA methods

\n

mParticle supports the following MFA methods:

\n\n

You must enroll an authenticator app before you can enroll device biometrics, a passkey, or a security key. The authenticator app provides a fallback sign-in method when a passkey or security key is unavailable. SMS is not supported for mParticle MFA.

\n

\n \n \n \n \n \n \n \n Enroll an authenticator app

\n

Enroll an authenticator app first. This method is required before you can add device biometrics, a passkey, or a security key.

\n

Before you begin, install an authenticator app on your phone or another trusted device.

\n

To enroll an authenticator app:

\n
    \n
  1. Open your MFA settings, then click Add Authenticator App under Authenticator app.
    2. \n
  2. Follow the prompts on the mParticle sign-in page.
    3. \n
  3. Scan the QR code with your authenticator app, or enter the setup key manually.
    4. \n
  4. Enter the verification code generated by your authenticator app.
    5. \n
  5. After enrollment succeeds, return to My Profile and confirm that Authenticator app appears as an enrolled MFA method.
    6. \n
\n

\"Authenticator

\n

\"Authenticator

\n

\n \n \n \n \n \n \n \n Enroll device biometrics or a passkey

\n

After you enroll an authenticator app, you can add device biometrics or a passkey, also called platform WebAuthn. This lets you verify sign-in with a browser or operating system prompt, such as Touch ID, Face ID, Windows Hello, or your platform passkey provider.

\n\n

To enroll device biometrics or a passkey:

\n
    \n
  1. After you enroll an authenticator app, open your MFA settings, then click Add Device Biometrics under Device Biometrics.
    2. \n
  2. Follow the prompts on the mParticle sign-in page.
    3. \n
  3. When your browser or operating system asks you to create or save a passkey, follow the prompt to complete enrollment.
    4. \n
  4. After enrollment succeeds, return to My Profile and confirm that Device Biometrics appears as an enrolled MFA method.
    5. \n
\n

\"Passkey

\n

\"Passkey

\n

\"Device

\n

\n \n \n \n \n \n \n \n What happens the next time you sign in

\n

After you enroll MFA, mParticle prompts for an additional verification step when required during sign-in.

\n

If you enrolled device biometrics or a passkey and sign in from a device and browser where that method is available, you will be prompted to use that method. Follow the browser or operating system prompt to complete sign-in.

\n

If device biometrics or a passkey are not available, use your authenticator app instead. This is expected when you sign in from a new device, a different browser, or a browser profile that does not have access to the enrolled passkey.

\n

\"Sign-in

\n

\n \n \n \n \n \n \n \n Troubleshooting

\n

Use the following steps to update or remove MFA methods when your device or authenticator app changes.

\n

\n \n \n \n \n \n \n \n Re-enroll an authenticator app

\n

Re-enroll your authenticator app if you change phones, move MFA codes to a new authenticator app, or lose access to the app you originally enrolled.

\n\n

To re-enroll an authenticator app:

\n
    \n
  1. Open your MFA settings, then click Re-enroll under Authenticator app.
    2. \n
  2. Confirm that you want to replace the existing authenticator app enrollment.
    3. \n
  3. Follow the prompts on the mParticle sign-in page.
    4. \n
  4. Scan the new QR code with your authenticator app, or enter the setup key manually.
    5. \n
  5. Enter the verification code generated by the new authenticator app enrollment.
    6. \n
  6. After enrollment succeeds, return to My Profile and confirm that Authenticator app appears as an enrolled MFA method.
    7. \n
\n

\"Authenticator

\n

If you cannot sign in because you no longer have access to any enrolled MFA method, contact mParticle support.

\n

\n \n \n \n \n \n \n \n Remove an unused device biometric method or security key

\n

Remove device biometrics, passkeys, or security keys that you no longer use. For example, remove an enrolled method if you replace a laptop, stop using a browser profile, lose a security key, or leave a device with a different owner.

\n

To remove an enrolled device biometric method, passkey, or security key:

\n
    \n
  1. Open your MFA settings, find the method you want to remove, then click Remove.
    2. \n
  2. Confirm that you want to remove the method.
    3. \n
  3. Confirm that the method no longer appears in your enrolled MFA methods.
    4. \n
\n

\"Enrolled

\n

\"Device

\n

You must keep at least one supported MFA method enrolled. If mParticle does not allow you to remove a method, enroll a replacement method first or contact mParticle support.

\n

\n \n \n \n \n \n \n \n Sign in with a new device or browser

\n

If you sign in on a new device, a different browser, or a different browser profile, you will not see your previously enrolled device biometric method or passkey. This is expected when that method is stored on another device, browser profile, or platform account.

\n

When device biometrics or a passkey are unavailable, sign in with your authenticator app. After you sign in, you can return to My Profile and enroll the new device.

\n

Not seeing device biometrics or a passkey on a new device is not an error as long as you can complete sign-in with your authenticator app.

","frontmatter":{"title":"mParticle Users and Roles","order":2,"seoTitle":null,"seoDescription":null},"parent":{"__typename":"File","modifiedTime":"October 12, 2026"}}},"pageContext":{"slug":"/guides/settings/platform/users/"}},"staticQueryHashes":["2950460867"]}