> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cedarai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Customer Users

> How to invite, upgrade, and support customers using IAM.

## What is a customer user?

A customer user is a standard ARMS user associated with their own organization who is granted access to a subset of your resources (e.g., sites, terminals, tracks, workflows) via IAM policies.

## Create a new customer user

<Steps>
  <Step title="Invite the customer by email">Assign to a user group in your road during the invite.</Step>
  <Step title="Customer registers">They complete signup via the emailed code.</Step>
  <Step title="Default role is applied">Start with limited access to a small set of pages/resources.</Step>
  <Step title="Attach to your customer group">They can now act on resources allowed by your IAM policy.</Step>
</Steps>

## Upgrade a customer user to a normal user

<Steps>
  <Step title="Customer requests upgrade" />

  <Step title="Admin approves" />

  <Step title="Swap roles">Default customer role is removed; default user role is applied.</Step>

  <Step title="Result">
    They can act on their own organization’s resources and any shared resources from inviting roads.
  </Step>
</Steps>

## Customer with multiple organizations

Add the existing customer to additional user groups from other organizations (e.g., partner sites or operators). They will gain access to those shared resources per policy.

## Manage customer users in the Admin Portal

<CardGroup cols={2}>
  <Card title="Users" href="/user-docs/admin/users" icon="user">
    View and manage all users including customers
  </Card>

  <Card title="User Groups" href="/user-docs/admin/user-groups" icon="users">
    Add customers to groups
  </Card>

  <Card title="Bindings" href="/user-docs/admin/bindings" icon="link">
    Grant customer groups access
  </Card>

  <Card title="Customer Portal" href="/user-docs/iam/customer-portal" icon="building-user">
    Configure customer-facing access
  </Card>
</CardGroup>
