> ## Documentation Index
> Fetch the complete documentation index at: https://docs.2501.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Users & Organizations

> Set up the initial tenant and administrator, then manage users and organizations in Command Center

## First deployment

The `identity` section of [values.yaml](https://docs.2501.ai/0.19/deployment/configuration.md) defines the first tenant, its organizations and the first administrator:

```yaml theme={null}
identity:
  tenant: My Company
  tenantId: ten_<uuid>        # optional: the tenant id your license is issued for
  organizations: [Engineering]
  admin:
    email: admin@company.com
```

The administrator's password is the `admin-password-v1` secret, which you create with the other secrets. If 2501 issued your license before the first deployment, set `tenantId` to the tenant ID supplied with it: the license is bound to that ID, and without it the first run generates another one.

The first run of the chart, after the database migrations, creates each part the installation does not have yet: the tenant, then its organizations when it has none, the administrator when it has no user, and the [LLM provider and model](https://docs.2501.ai/0.19/deployment/llm-providers.md) from `llm` when it has no provider. Its log says, part by part, what it created or found already set. Sign in at `https://<commandCenter.host>` with the administrator's email and that password.

From then on Command Center owns them. Editing `identity` later changes nothing: a rename or a deletion made in Command Center is never undone, and a run that stopped half-way finishes on the next one.

## Ongoing management

Sign in to Command Center with the administrator account. Manage [users](https://docs.2501.ai/0.19/configure/users.md) and [organizations](https://docs.2501.ai/0.19/core-concepts/organizations.md) there. Tenant model defaults are editable under **Settings > Tenant**.

## User roles

| Role | Description |
| - | - |
| `ADMIN` | Full access to all resources and user management |
| `USER` | Read and write on org resources, read-only on shared resources |
| `AUDITOR` | Read-only access everywhere |

[Users](https://docs.2501.ai/0.19/configure/users.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.