Overview
Centralized User Management allows a Parent company to serve as the primary source of truth for user access. Changes made at the Parent level, such as adding, updating, or removing, sync to every company beneath it in the organizational tree where the Parent maintains control.
User management across the hierarchy operates on a model of Inheritance:
Inherited Control: The Parent defines the user’s role and status. Changes made at the Parent level are automatically pushed to the subsidiary.
Locally Managed: The user is managed only within a specific subsidiary/portfolio company. Parent-level actions do not affect these users, and they remain under the control of the local administrator.
Navigating the Members List
The Members list provides a consolidated view of all users who have access to the current company. Each column provides specific context for managing access:
Name & Email: The user’s identity and unique sign-in identifier.
Role: The platform role (e.g., Administrator). For centrally managed users, this role is enforced across the entire subtree.
Status: The user’s current state—Active, Inactive, or Pending Invitation.
Controlled by: This column displays the name of the specific company that governs the user's settings and the user's affiliation:
Local Management - Pin Icon
: The user is managed locally in this company; Parent-level changes do not apply.Centrally Managed by this Parent - Hierarchy Icon
: This state appears for a Parent that manages members centrally. The user is managed here and automatically synced to the companies below.Centrally Managed by Parent - Building Icon
: This indicates the user is controlled by a Parent in the hierarchy and cannot be edited locally.
Company Memberships (Parent Admins Only): Selecting View company memberships from the action menu (three dots) or clicking the affiliation icon opens a window showing every subsidiary or portfolio company the user belongs to and the specific name of their controlling company.
Operations
Adding Users to the Hierarchy
Adding Users to the Hierarchy
To grant a user access to the Parent and all current and future subsidiaries/portfolio companies:
Navigate to Members > + New member.
Enter the email and select the Cye Platform role.
Check the box: "Apply to this company and to all companies below it".
Save.
The Result: The user is added to the Parent and every existing subsidiary or portfolio company below this Parent. They will also be automatically added to any new companies created under this Parent in the future.
Editing and syncing role changes
Editing and syncing role changes
For Centrally Managed users, edits to Role or Status at the Parent level can be pushed downward to all subsidiaries/portfolio companies by checking the relevant box. This ensures that user permissions remain synchronized and consistent across the entire organization.
Converting Local Users to Centralized Management
Converting Local Users to Centralized Management
If a user is already a member of one or more subsidiaries, you can consolidate their management under a single Parent. By adding the existing user at the Parent level and checking "Apply to this company and to all companies below it", the Parent "claims" the user.
What changes:
Ownership Shift: Control moves from the local subsidiaries to the Parent. The user's Control State will change from "Local Management" to "Centrally Managed."
Global Overwrite: The Parent’s defined Role and Status will now dictate the user's access across the entire subtree, replacing any previous local configurations.
Centralized Edits: All future modifications to this user must be performed from the Parent company to ensure synchronization.
Global Deletion
Global Deletion
Deleting a Centrally Managed user at the Parent level removes them from the Parent and all subsidiaries/portfolio companies.
Note: Managing Centrally Governed Members
If you are an admin in multiple companies and encounter a member you cannot edit, they are likely centrally managed by a Parent. To make changes, identify the governing company in the Controlled by column (or the icon tooltip), switch to that company in the platform, and perform the Role or Status changes there to sync them across the hierarchy.
Important Constraints
Important Constraints
Entire Subtree Only: Centralized actions apply to the entire organizational tree beneath the Parent. To enable a user for selected companies only, add the user separately to each company as a Local member.
Locked subsidiary/portfolio company Control: Subsidiary/portfolio company administrators cannot modify the role or status of a centrally managed user.
Individual Management: This feature applies to individual members; centralized management of Groups is not supported.
Wrap-Up/Next Steps
Centralized User Management transforms multi-company administration into a single-stream workflow. By establishing the Parent level as the source of truth, you ensure that high-level roles are consistent and that offboarding is absolute across your entire organizational footprint.
Unified Visibility: Parents can use the Company Memberships view for a complete map of where any individual user holds access and which subsidiary/portfolio company controls it.
Scalable Onboarding: Leverage the "Apply to all" checkbox to ensure global stakeholders are automatically provisioned in any future companies added to your hierarchy.
Instant Offboarding: Deactivating or deleting a centrally managed user at the Parent level provides immediate, global revocation of access, eliminating the risk of "ghost" accounts in subsidiaries/portfolio companies.