Overview
Authentication controls who can sign in to SigNoz and what they can do after they sign in. SigNoz supports direct sign-up with email and password, admin-issued invites, and single sign-on (SSO) through an external identity provider.
The first user becomes Admin
The first person to sign up on a new SigNoz instance gets the Admin role automatically. Everyone after that joins through an invite from an Admin, or through SSO if your organization has it configured.
Roles
SigNoz includes three managed roles:
- Admin: full access, including user management, role management, and billing.
- Editor: can create and edit dashboards, alerts, and pipelines.
- Viewer: read-only access to observability data.
You can also define custom roles with a narrower set of permissions. See Roles for the full managed-role and custom-role reference.
Invite team members
Admins invite teammates and assign their role from the Members page under Settings. The same page lists pending invites and everyone with existing access.
For the step-by-step flow with current screenshots, see Invite Team Member.
Single sign-on (SSO)
SigNoz supports SAML 2.0, OIDC, and Google Workspace (OAuth2) for SSO, so users can sign in through your identity provider instead of a SigNoz-specific password. Availability depends on your plan; see SSO Overview for supported methods and setup.
Next steps
- Authorization Overview: principals, transactions, and how roles connect.
- Roles: managed and custom roles reference.
- Invite Team Member: invite flow and pending invites.
- SSO Overview: SAML, OIDC, and Google Workspace setup.
