> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# Administer Itential Cloud

> Manage users, groups, roles, and organization settings in Cloud Hub.

Cloud Hub provides administrative capabilities for managing users, access controls, and organization settings across all your Itential Cloud environments.

## Administration capabilities

Cloud Hub administrators can manage:

| Capability                | Description                             |
| ------------------------- | --------------------------------------- |
| **Users and groups**      | Create users, manage group memberships  |
| **Roles and permissions** | Assign roles, configure access controls |
| **Service accounts**      | Create API access accounts              |
| **Organization settings** | Configure cloud-wide preferences        |
| **Environment access**    | Control environment access per user     |

## Access administration

Access Cloud Hub administration features based on your role.

#### Sign in to Cloud Hub

Authenticate with administrator credentials

#### Open Admin Portal

Select **Admin** from the Cloud Hub sidebar

#### Choose administrative area

Select the feature you want to manage:

* Users & Groups
* Roles & Permissions
* Service Accounts
* Settings

Administrator access is required to view and manage Cloud Hub administration features. Contact your organization's Cloud Hub owner to request admin permissions.

## Next steps

#### [Manage users and groups](/itential-cloud/cloud-hub/administration/manage-users-groups)

Administer users and group memberships

#### [Assign roles and permissions](/itential-cloud/cloud-hub/administration/roles-permissions)

Configure access controls

#### [Use service accounts](/itential-cloud/cloud-hub/administration/service-accounts)

Set up API access

#### [Ship logs to S3](/itential-cloud/logging/ship-logs-to-s3)

Configure log export