Manage users
Invite people to your Carriyo account and decide what each of them can do. A user's access has two parts:
- Apps: where they can sign in. The Dashboard, the Storeapp and the Fulfillment app.
- Grants: what they can do, and for which merchants and regions. A grant gives either a role or a list of specific permissions.
Each account has a fixed number of user seats. You can only give access you hold yourself, and you can't change or remove a user who holds access you don't.
For what each role can do, see Manage user roles and permissions.
Add a user
1. Go to Settings > Users on the Carriyo Dashboard and click the add button in the top-right corner.
2. Choose Carriyo User for someone who signs in with an email address and password, or SSO User for someone who signs in through your single sign-on. Enter their email address or SSO user ID and click Next.
3. On the user's page, tick the Apps they sign in to. A user needs at least one app.
4. Under Grants, choose what they can do:
- A role, such as Viewer or Operator. New grants start as Viewer.
- Specific permissions, for access that no role matches. Pick the permissions one by one.
Then choose the merchants the grant applies to, all of them or the ones you pick, and the region: any country or location, the countries you pick, or the locations you pick. Tick MCP access to let the user's AI agents act with this grant through the Carriyo MCP server.
The Admin and Account Manager roles always apply to every merchant and region, and need the Dashboard app.
5. Click What … can do to check the permissions the grants add up to.
6. Click Invite user. Carriyo emails the user a link to set their password and join the account. The invitation is valid for 7 days.
SSO users, and users whose email domain your account adds users from directly, need no invitation. For them the button reads Add user, you enter their name, and they get access straight away.
Change a user's access
Click a user in the list to open their page. Change their apps or grants and click Save.
- Turn the status switch off to make a user inactive. They can't sign in until you turn it back on, and they don't take a seat in the meantime.
- Reset Password in the user's actions emails them a link to choose a new password.
- Delete takes the user off your account.
The account owner holds every permission through the account itself. Their access can't be changed, deactivated or deleted.
Pending invitations
Users who haven't accepted their invitation yet show as Pending Invitation.
- Click Resend Invitation in the user's actions to send the same invitation again.
- Click Edit to change the access the invitation offers, then click Resend invitation on the page. Only the latest invitation works.
Fulfillment app users
Store admins manage who works at their stores in the Fulfillment app itself, under Settings > Users. They choose the modules each user works at the store, such as picking or packing. The users' other access stays as you set it in the Dashboard.
Import and export users
Use the export and import buttons on the users list to work on many users at once.
- Export downloads the users in the list with their access.
- Import reads up to 100 users from a CSV or Excel file in the same format. Click Download template in the import dialog to start from scratch.
Each row is one grant. The columns are:
| Column | What to enter |
|---|---|
| Name | Required. The user's full name. |
| User ID | Required. The user's email address, or their SSO user ID. |
| Status | Active or Inactive. Empty means Active. |
| Apps | Required. dashboard, storeapp or fulfillment_app, comma separated. |
| Role | A role name, such as Operator. Set a role or permissions, not both. |
| Permissions | Permissions, comma separated, such as shipment:list, shipment:read. |
| Merchants | Merchant ids or names, comma separated. Empty or ALL means every merchant. |
| Countries | Country codes, comma separated. Empty or ALL means every country. |
| Locations | Location ids or names, comma separated. Empty or ALL means every location. Use countries or locations, not both. |
| MCP Access | Yes or No. Empty means No. |
Give each user one role or permission list. The import checks each row as the user's page would and shows the reason for any row it refuses. Only the rows without a problem are uploaded.