User Accounts for Confluent Cloud¶
Each user account represents a single human, and allows management of that person’s access to Confluent Cloud.
User accounts may be local to Confluent Cloud, or authenticate via Single sign-on. Local users are uniquely identified by their email address, and authenticate using a password managed in Confluent Cloud.
User accounts are able to sign in to the Confluent Cloud Console, Confluent Cloud CLI, and may own all types of API keys.
Role-based access control roles can be applied to user accounts.
A given user (corresponding to a specific email address) may only be a member of one organization at a time.
If your email provider supports tagging with a plus sign (+), then you can create a new user account using your existing email address with a different tag. For example, if you have an user account using email@example.com that belongs to Organization 1, and you want to collaborate with your coworker in Organization 2, your coworker could invite firstname.lastname@example.org to Organization 2. You will be able to log in to Organization 1 with email@example.com or Organization 2 with firstname.lastname@example.org. Alternatively, you can ask Confluent support to deactivate Organization 1, so your coworker can invite email@example.com to Organization 2.