Administrators can invite users to Red Canary and adjust their roles and access controls. Users with Red Canary accounts will have to accept their invitation and set up their account before they can log in.

Invite a user to Red Canary

You can invite a user to your Red Canary account. The user will receive an email with instructions for accepting an invitation and setting up their account.

Note: You can add a vendor as a user to Red Canary. Once added, check out Understanding and assigning roles to assign roles for your vendor.

Invite a user to your Red Canary account

1. Click your user icon at the top right of your Red Canary, and then click Users & Roles.
2. Enter the email address of the user that you want to invite.
3. Click Invite.
4. Assign one or more roles to the user by clicking the boxes next to each role.

What if the user accepts the invite but receives a message that the invitation has expired?

Invitations expire after 48 hours. If the invited user does not accept the invitation during that window, the link will no longer be valid and you will need to resend the invitation. 

Re-send an invitation to a user

1. Click your user icon at the top right of your Red Canary, and then click Users & Roles.
2. Click the link next to the message stating that the user’s invitation has expired.

How do I delete a user?

You can remove a user from your account by revoking all of their roles.

Remove a user from your account

1. Click your user icon at the top right of your Red Canary, and then click Users & Roles.
2. Right-click the  icon, and then click Remove User.

What happens if I have access to multiple Red Canary accounts?

User accounts are bound to email addresses, so if your organization has multiple subdomains or accounts with Red Canary, you will have a single user account that is granted roles on all of the subdomains/accounts to which you've been added.

If your user account/email exists in multiple subdomains, you will be permitted access these domains without re-authenticating. In other words, when switching subdomains, you are not required to log in again. Authentication happens once and your credentials are cached when you first log in. If you log-out, the cache will be cleared and you will have to log in again if you want to access the same or a different subdomain.

Note: Logon events are recorded via the audit log of the subdomain into which you authenticate.

The following attributes are associated with your account and are the same across subdomains:

• Your name
• Your phone number
• Your notification preferences about status checks, threats, summaries, etc.
• API tokens
• MFA requirements