Invite users

You can invite others to collaborate with you in Astra DB.

Prerequisites

In the Astra Portal, click the current organization, and then select Manage Organizations.
Click Add Organization.
Enter a name for the organization and a notification email address.
Click Add.

Initially, you are the only user in the organization, and you have the Organization Administrator role.

Custom roles are an optional way to configure permissions, if the default roles aren’t sufficient.

You can create custom roles in the Astra Portal or with the DevOps API.

In the Astra Portal, make sure you’re in the organization where you want to create the role. Switch organizations, if necessary.
Go to Settings, and then click Roles.
Click Add Custom Role.
Enter a name for the role.
Select the permissions to assign to the role.

To allow this role to view the Astra Portal, you must select the Read User and View DB permissions.
Select the specific databases and keyspaces that the role can access. Alternatively, to allow the role to access all databases and keyspaces, select Apply permissions to all databases in this organization.
Click Create Role.

In the Astra Portal, make sure you’re in the organization where you want to add a user. Switch organizations, if necessary.
Go to Settings, and then click Users.
Click Invite User.
Enter the user’s email address and select a role.
Click Invite User.

The user receives an invitation email to join your organization.

Invited users are listed as pending until they accept the invitation to join your organization.

Use the Astra Portal or the DevOps API to create an application token.

In the Astra Portal, go to Tokens.
Select the role you want to attach to your token. The permissions for the selected role are shown.
Select Generate Token to generate a Client ID, Client Secret, and Token.
Download your Client ID, Client Secret, and Token, and then store them securely.

After you exit this page, you can’t access the Client ID, Client Secret, and Token again.

These tokens never expire, but you can delete tokens that are compromised or no longer needed.

You can use your Client ID and Client Secret to connect to your database.