> ## Documentation Index
> Fetch the complete documentation index at: https://www.osohq.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring your account

> Manage users, environments, and API keys in Oso Cloud Pro or Enterprise.

## User management

### Add users to your organization

**Prerequisites:**

* The person you want to invite must already have an Oso Cloud Developer account (GitHub or Google sign-in).
* Collect their GitHub username or Google Workspace email to add them.

**Steps:**

<Steps>
  <Step>
    Go to the [Users tab](https://ui.osohq.com/settings/?tab=users) in settings
  </Step>

  <Step>
    Click **Add a user**
  </Step>

  <Step>
    Enter the user's GitHub username or Google Workspace email
  </Step>

  <Step>
    Click **Add user**
  </Step>
</Steps>

<Warning>Only existing Oso Cloud users can be added. The system returns an error for unknown usernames.</Warning>

### Configure user roles

Oso Cloud supports two user roles:

**Member**

* Read access to all organization environments.
* Manage non-production environments.

**Admin**

* All Member permissions.
* Manage production environments.
* Invite/remove users.
* Change user roles.

#### Change a user's role

New users default to Member role.

<Steps>
  <Step>
    Navigate to the [Users tab](https://ui.osohq.com/settings/?tab=users)
  </Step>

  <Step>
    Click the Role dropdown next to the user
  </Step>

  <Step>
    Select the new role
  </Step>
</Steps>

### Remove users

Remove users who leave your company or change teams:

<Steps>
  <Step>
    Go to the [Users tab](https://ui.osohq.com/settings/?tab=users)
  </Step>

  <Step>
    Click **Remove** next to the user
  </Step>

  <Step>
    Confirm removal in the modal dialog
  </Step>
</Steps>

## Environment management

### Create new environments

Oso Cloud provides default environments, but you can create additional ones for specific use cases:

<Steps>
  <Step>
    Navigate to the [Environments tab](https://ui.osohq.com/settings/?tab=environments)
  </Step>

  <Step>
    Click **Create**
  </Step>

  <Step>
    Enter the environment name
  </Step>

  <Step>
    Click **Create**
  </Step>
</Steps>

### Delete environments

Delete environments you no longer need:

<Steps>
  <Step>
    Go to the [Environments tab](https://ui.osohq.com/settings/?tab=environments)
  </Step>

  <Step>
    Click **Delete** next to the target environment
  </Step>

  <Step>
    Type the environment name to confirm
  </Step>

  <Step>
    Click **Confirm**
  </Step>
</Steps>

<Note>**Note:** Default environments cannot be deleted.</Note>

## API key management

### Create API keys

Create API keys for programmatic access to Oso Cloud:

<Steps>
  <Step>
    Navigate to the [API Keys tab](https://ui.osohq.com/settings/?tab=api-keys)
  </Step>

  <Step>
    Click **Create API Key** next to your target environment
  </Step>

  <Step>
    Select key type:

    * **Read-Write:** Full authorization operations
    * **Read-Only:** Query-only access
  </Step>

  <Step>
    Copy the generated key immediately
  </Step>
</Steps>

**Key management options:**

* Use **Copy** to copy only the API key
* Use copy icons for environment variable commands

<Warning>**Security Alert:** API keys display only once and cannot be retrieved later. Store them securely.</Warning>
<Warning>**Limit:** Maximum 128 tokens per environment.</Warning>

### Revoke API keys

Revoke compromised or unused API keys:

<Steps>
  <Step>
    Go to the [API Keys tab](https://ui.osohq.com/settings/?tab=api-keys)
  </Step>

  <Step>
    Click **Revoke** next to the target key
  </Step>

  <Step>
    Enter the API key ID to confirm
  </Step>

  <Step>
    Click **Revoke API Key**
  </Step>
</Steps>

**Common revocation scenarios:**

* Compromised credentials
* Key rotation policies
* Cleanup of unused keys
