Users and roles
Advania ALT has two platform roles. Every user has exactly one. API keys have no roles at all — a key is always narrower than the user who created it.
| Role | What it means |
|---|---|
| Admin | Can do everything a Developer can, plus manage users, configure account settings, and view or revoke any API key |
| Developer | Can sign in, create and manage their own API keys, create knowledge bases, and make inference calls |
Adding users
Users are added through your Microsoft Entra directory — not through the Advania ALT console. This keeps your existing identity governance in charge.
If you chose Option A (security groups) during Connect Entra
Add the user to the ALT-Admins or ALT-Devs security group in Entra. The next time they sign in, they will have the role.
If you chose Option B (App Roles)
In Entra: Enterprise applications → your Advania ALT app → Users and groups → assign the user to the admin or developer App Role.
Removing users
Reverse the above — remove the user from the security group, or remove the App Role assignment. Access is revoked on the next request. Any API keys the user created are disabled at the same moment (see API-key lifecycle → owner deactivation).
Promoting a Developer to Admin
Add them to ALT-Admins (Option A) or assign the admin App Role (Option B). Both roles are allowed on the same user; the higher-privilege role wins.