This section describes how to create and manage users in Peliqan and other CIAM topics (Customer Identity and Access Management).

Create users

Normal users

Account Owners and Account Admins can manage users in Peliqan under Settings > Users. Click on “Add user” and select “Create user” or “Invite by email”.

Service account users

Add dedicated users for specific services, for example Power BI. Create a user, and assign it to the appropriate groups. Next, create an API key for that user and use it externally, or use the dedicated data warehouse user of the service account user in Power BI or any other BI tool.

Create users via the API

You can automate provisioning of users via the Peliqan API: Peliqan REST API

MFA (Multi factor authentication)

You can enforce 2FA (2-Factor authentication) for your account under Settings > Security.

SSO (single sign on)

Users can login to Peliqan with their existing Google account or Microsoft account using SSO (single sign on). Create the users first in Peliqan with the exact same username as in Google or Microsoft. More info: SSO with Microsoft

Configure login options

Account Owners and Account Admins can enable and disable different login options under Settings > Security. You can enable/disable login with password and you can enable/disable the available SSO providers. For example if you want to enforce login with Microsoft, turn off login with password and turn off Google SSO.

Permissions

Permissions in Peliqan are managed through groups. more info: Permissions

Partner model (sub accounts)

Partners with multiple end-customers can create sub accounts in Peliqan for each of their customers. Users are added in sub accounts directly. More info: Manage sub accounts

User access across Peliqan features

Peliqan feature	Authentication
Peliqan Platform UI	Login with username & password, or login with Microsoft or Google (SSO)
Peliqan MCP Server	OAuth with Peliqan user login
Peliqan Excel add-in	Peliqan user login (login & password) or API key
BI tools (direct Peliqan DWH access)	Dedicated DB user per Peliqan user
Peliqan Data apps	Publish with access = “Peliqan users (authenticated users only) Use impersonation in app.
Peliqan Machine apps	Publish with access = “Peliqan users (authenticated users only) Use impersonation in app.
Sub accounts	Create users in each sub account.