Provision and deprovision users
How to grant and remove application access in ZenAdmin — single users, bulk uploads, and automatic assignment rules.
Granting someone access to an app is provisioning; removing it is deprovisioning. Both live on the app's Users tab. Which options appear depends on the app's type and what its integration supports.
How do I provision a user?
- Open the app and go to Users → Add users → Add manually.
- Users — select the employees to add.
- Configuration — fill any per-user provisioning fields the app requires.
- Submit — for integrated apps, ZenAdmin triggers the provisioning through the integration and syncs.
New users show as Pending until they accept the app's invite.
“Sync [app name] and try again”?
Some apps need their configuration synced into ZenAdmin before you can provision. If you see this message, click Sync on the app's page, wait for it to finish, then try again. While a sync is running, the row menu is disabled and shows Sync in progress.
How do I change someone's access?
For apps that support it, choose Update access (or Add access) from the person's row on the Users tab, change their role or groups, and save.
You can't run provisioning actions on your own row — ask another admin.
What fields do Harness and Snyk need?
- Harness — connect with your Account ID and a Service Account API Key. When provisioning, choose Role and resource group access (required) and, optionally, User groups. Users managed outside ZenAdmin (externally managed in Harness) can't be provisioned from here.
- Snyk — connect with an API Token, your Organization ID and Region (Global, United States, European Union or Australia). When provisioning, choose the Organization role. Deprovisioning is labelled Remove organization access.
How do I add many users at once?
For non-integrated apps, choose Add users → Bulk Upload: download the CSV template, fill it in, and upload. The results screen shows what was imported.
How do I deprovision a user?
Find the person on the Users tab and choose Deprovision from their row. Confirm in the dialog — for integrated apps this removes their access in the tool itself.
Can access be granted automatically?
Yes — on the app's Info tab, set default assignment rules to provision (and deprovision) automatically, so new joiners get their standard tools without a ticket.
Last updated on