This tutorial assumes you have set TRACECAT__AUTH_TYPES=basic in your .env file. For production deployments, we highly recommend using SAML SSO or Google OAuth.

Owner

The owner role is assigned to the first user who logs into Tracecat. This user has admin rights to every workspace in the Tracecat instance.

Security

Define the TRACECAT__AUTH_ALLOWED_DOMAINS environment variable to restrict the email domains that can log into Tracecat. For example, to restrict access to email addresses from tracecat.com and example.com, set the following:

TRACECAT__AUTH_ALLOWED_DOMAINS=tracecat.com,example.com

Login as admin

1

Access Tracecat

Go to the Tracecat UI at http://localhost and click the Sign up button.

2

Sign up

Enter your email address and a password (minimum 12 characters).

3

🎉 Welcome

After signing up, you’ll be redirected to the default workspace.

Invite new users

To add new users to Tracecat, the user must first sign-up to Tracecat. They will be redirected to the following page:

To invite the new user to a workspace, first log into Tracecat as the admin, then follow these steps:

1

Workspace members

Select the workspace you want to invite the user to, then under the settings menu, click Manage members.

2

Add workspace member

Click the Add member button, then enter the email address of the new user that signed up. The new user will show up as:

3

Login as new user

The new user can now log into Tracecat using the email address and password they used to sign up. They will be redirected to the workspace they were invited to.

Organization settings

Superadmins also have the ability to:

  • View all users and sessions.
  • View all workspaces and settings.
  • Remove any non-superadmin user from any workspace.
  • Revoke active sessions for any user.

Was this page helpful?