Skip to content
Saiku Cloud

Members

Members is the team-management surface. Invite people, set their roles, change permissions, revoke access when they leave. It also lists everyone currently in your tenant with their last sign-in time — handy for an occasional access review.

Inviting someone

  1. Click Invite member and enter their work email.

  2. Pick a tenant-level role:

    • Owner — everything, including billing and member management. Reserve for one or two people.
    • Editor — create and edit schemas, connections, files; can’t change billing or invite others.
    • Viewer — read-only. Can open cubes in the Saiku UI and run queries; can’t author or change anything.

  3. Optionally pick which workspaces they should see, and the role per workspace. Useful when someone needs to be an editor in prod but only a viewer in staging.

  4. Click Send invite. The invitee gets an email with a one-time link valid for seven days.

The invitee clicks through, sees who invited them and what they’re being invited to, and clicks Accept. If they don’t already have a Saiku Cloud login they sign up at this point and land in your tenant.

Changing a role

Click the member’s row, pick a new role from the dropdown, and the change applies on their next request. No re-login needed.

Revoking access

Trash icon on the row, confirm. The member’s session is invalidated immediately — any in-flight request gets 401 Unauthorized. Their workbooks and saved queries stay where they are (the cubes they authored remain in the catalog), so a revoked member doesn’t leave broken state behind.

If you re-invite the same email later, their old ACLs and content are restored — revoke isn’t a permanent purge.

SSO instead of invites

Once you’re on Team or above, you can authenticate everyone through your own identity provider — Okta, Google Workspace, Azure AD, Auth0, anything WorkOS speaks. With SSO active, members are auto-provisioned on first sign-in (matched by email domain) and the Members page mostly shows you who’s signed in rather than acting as the invite surface.

SSO setup is a short conversation — email onboarding@saiku.bi and we’ll wire your IdP.

  • Workspaces — finer-grained access control within the tenant.
  • Audit log — see what each member has done.
  • Billing — upgrade to unlock Members.