> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.
# How to invite users to a tenant
You can add users in one of the following ways:
* If you have created a [federation](../overview#federations) and configured single sign-on, you can create user accounts in your application in one of the [supported identity providers](/iam/federations/saml-sso).
Then, users can sign in to Nebius AI Cloud by using the federation ID.
* If you do not have a federation or you want to use an alternative method, you can send invitations to users from Nebius AI Cloud. In this case, users receive their invitations via email. Once the user accepts the invitation, they can [sign in by using any available method](../log-in#how-to-sign-in-to-the-web-console), including the federation ID.
An invitation is valid for three days.
To send an invitation, do the following:
1. Create it:
1. In the sidebar, go to **Administration** → **IAM**.
2. Open the **Invitations** tab.
3. Click **Create invitation**.
4. In the window that opens, specify the email of the user whom you would like to invite.
5. Click **Create**.
Run the following command:
```bash theme={null}
nebius iam invitation create --parent-id --email
```
In the command, specify:
* `--email`: Email of the user whom you would like to invite.
* `--parent-id`: [Tenant ID](/iam/get-tenants#cli).
1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform.
2. Create the following configuration file:
```hcl theme={null}
resource "nebius_iam_v1_invitation" "" {
parent_id = ""
email = ""
}
```
In the file, specify:
* `email`: Email of the user whom you would like to invite.
* `parent_id`: [Tenant ID](/iam/get-tenants).
3. Check that the configuration is correct:
```bash theme={null}
terraform validate
```
4. Apply the changes:
```bash theme={null}
terraform apply
```
The invitation to the tenant is sent to the specified email.
2. Add the user to the required group. You can do it at any time, even before the user accepts their invitation.
1. In the sidebar, go to **Administration** → **IAM**.
2. Open the **Invitations** tab.
3. In the line of the invited user, click → **Add to group**.
If you cannot find the user in the list of pending invitations, switch to accepted invitations.
4. In the window that opens, select the groups to which you want to add the user.
5. Click **Close**.
1. Get a list of groups, so you can choose the group for the user and copy the group ID:
```bash theme={null}
nebius iam group list --parent-id
```
Save the `metadata.id` value for the required group.
2. Get the ID of the invited user:
```bash theme={null}
nebius iam invitation list --parent-id
```
Save the `metadata.status.tenant_user_account_id` value for the required user.
3. Assign the group to the user:
```bash theme={null}
nebius iam group-membership create \
--parent-id group-*** \
--member-id tenantuseraccount-***
```
Specify the group and user ID that you saved earlier.
1. In the directory with the already created Terraform manifest, add the following configuration file:
```hcl theme={null}
resource "nebius_iam_v1_group_membership" "" {
parent_id = data.nebius_iam_v1_group..id
member_id = nebius_iam_v1_invitation..status.tenant_user_account_id
}
data "nebius_iam_v1_group" "" {
parent_id = ""
name = ""
}
```
The file contains the following:
* Resource that adds a group to the user. In the resource, specify the names of the group and invitation resources.
* Data source that you use to get the group ID. In the data source, specify the tenant ID and the name of the group to which you want to add the user.
2. Check that the configuration is correct:
```bash theme={null}
terraform validate
```
3. Apply the changes:
```bash theme={null}
terraform apply
```
The user is added to the specified group. Now, the user has access to the tenant and they can manage resources within it.