Learn about user permissions and how to add and remove logins in a Firebolt account.
Logins are managed at the organization level and are used for authentication. Logins are a combination of a login name (email), first name, last name, and password, unless you’ve configured Single Sign-On (SSO). Moreover, logins can be configured with advanced authentication properties such as MFA and network policies. Logins are linked to users at the account level, so that roles may be managed separately per account. A user must be linked to either a login or a service account for programmatic use to gain access to Firebolt. You can add, edit or delete logins using SQL or in the UI.
To view all logins, click Configure to open the configure space, then choose Logins from the menu, or query the information_schema.logins view.
Managing logins requires the org_admin role.
To create a login using SQL, use the CREATE LOGIN statement. For example:
To create a login via the UI:
To edit an existing login using SQL, use the ALTER LOGIN statement. For example:
To edit a login via the UI:
Click Configure to open the configure space, then choose Logins from the menu.
Search for the relevant login using the top search filters, or by scrolling through the list of logins. Hover over the right-most column to make the login menu appear, then choose Edit login details. Edit the desired fields and choose Save.
Login name can not be changed for logins that were provisioned via SSO.
To delete an existing login using SQL, use the DROP LOGIN statement. For example:
To delete a login via the UI:
Click Configure to open the configure space, then choose Logins from the menu.
Search for the relevant login using the top search filters, or by scrolling through the logins list. Hover over the right-most column to make the login menu appear, then choose Delete login.
If the login is linked to any users, deletion will not be permitted. The login must be unlinked from all users before deletion.