Members
Members is where you manage who has access to your VeloDB Cloud organization and what they can do.
Click your profile area in the bottom-left corner of the console to open the account menu, then click Members under Organization.
Note Members are organization-level identities used to sign in to the VeloDB Cloud console. For warehouse-level users that applications and BI tools use to connect to a warehouse, see Warehouse Users and Roles.
Invite members
Organization Admins can invite new users and assign them a role. New users join the organization by activating the link in the invitation email.

Roles
These are organization roles: they govern what a member can do in the VeloDB Cloud console. They are separate from the SQL roles that control warehouse access, which you manage under Warehouse Users and Roles.
An organization has three built-in roles. You can also create custom roles with any combination of the four permission categories.
| Role | Manage Access Control | Manage Billing | Manage Organization | Manage Warehouses |
|---|---|---|---|---|
| Organization Admin | Yes | Yes | Yes | Create / Edit / View / Query / Monitor |
| Warehouse Admin | No | No | No | Edit / View / Query / Monitor |
| Warehouse Viewer | No | No | No | View / Query / Monitor |

To create a custom role, pick a role name and tick the permissions you want. Custom roles can be edited or deleted.
The user who creates the organization is automatically the Organization Admin.
Configure SAML single sign-on
Premium organizations can authenticate console members through a SAML 2.0 identity provider. SAML SSO supports verified corporate email domains, just-in-time provisioning, default role assignment, and organization-level SSO enforcement.
Only Organization Admins can configure SAML SSO. For setup instructions, see SAML Single Sign-On.
Multi-factor authentication
Organization Admins can require every member to complete multi-factor authentication before signing in to the console. Members can also add a second factor to their own account at any time.
For setup steps, supported methods, and how MFA interacts with SAML SSO, see Multi-Factor Authentication.