Admins that log in to the Organization Center can set up and manage organization users, which are users who are involved with Enterprise Sign-In (SSO). Their level of involvement will depend on the role you assign to them in the Organization Center.

The Users tab in the Organization Center provides access to your organization users. Each user has one of the following roles:

• Admin (Read & Write) – Individuals who can log in to the Organization Center and manage all settings. They may or may not be GoTo account holders themselves.
• Admin (Read Only) – Individuals who can log in to the Organization Center and view settings, but not modify them. They may or may not be GoTo account holders themselves.
• User – Individuals with GoTo accounts who use Enterprise Sign-In, but do not need Organization Center access.

You can add, delete, and update organization users. If the user already has an account ID (an account for OpenVoices, for instance), you must still add them to the organization. They can then authenticate through its IdP, and because their ID is a company ID, they can no longer change their own email address. If they do not have a product account login, they are provisioned with one but it is not associated with a specific product unless you have set up your system to do this through a user provisioning service like the Active Directory Connector, manually in the GoTo Admin Center (classic), or programmatically using automated provisioning..