> ## Documentation Index > Fetch the complete documentation index at: https://docs.langchain.com/llms.txt > Use this file to discover all available pages before exploring further. # Customize user management This guide assumes you have read the [admin guide](/langsmith/administration-overview) and [organization setup guide](/langsmith/set-up-hierarchy#set-up-an-organization). LangSmith offers additional customization features for user management using feature flags. ## Features ### Workspace level invites to an organization The default behavior in LangSmith requires a user to be an Organization Admin in order to invite new users to an organization. For self-hosted customers that would like to delegate this responsibility to workspace Admins, a feature flag may be set that enables workspace Admins to invite new users to the organization as well as their specific workspace **at the workspace level**. Once this feature is enabled via the configuration option below, workspace Admins may add new users in the `Workspace members` tab under `Settings` > `Workspaces`. Both of the following cases are supported when inviting at the workspace level, while the organization level invite functions the same as before. 1. Invite users who are NOT already active in the organization: this will add the users as pending to the organization and specific workspace 2. Invite users who ARE already active in the organization: adds the users directly to the workspace as an active member (no pending state). Admins may invite users for both cases at the same time. #### Configuration ```yaml Helm theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} config: workspaceScopeOrgInvitesEnabled: true ``` ```bash Docker theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} # In your .env file WORKSPACE_SCOPE_ORG_INVITES_ENABLED="true" ``` ### SSO new member login flow As of helm **v0.11.10**, self-hosted deployments using OAuth SSO will no longer need to manually add members in LangSmith settings for them to join. Deployments will have a default organization, to which new users will automatically be added upon their first login to LangSmith. For your **default** organization, you can set which workspace(s) and workspace role is assigned to new members. For **non-default** organizations, the invitation flow remains the same. Once a user joins an organization, any changes to their workspaces or roles beyond the default organization settings must be managed either through LangSmith settings (as before) or via SCIM. By default, all new users are added to the organization’s initially provisioned workspace (**Workspace 1** by default) with the **Workspace Editor** role. Update SSO Member Settings To change your default organization, use **Set Default Organization** in the organization selector dropdown. (Org Admin permissions required in both the source and target organization.) ### SSO Groups Sync SSO Groups Sync on self-hosted requires LangSmith chart version **0.15.0-rc.3** (application version **0.15.2rc1**) or later. [SSO Groups Sync](/langsmith/user-management#sso-groups-sync-alternative) reads group memberships from the OIDC ID token and assigns org and workspace roles using the [SCIM naming convention](/langsmith/user-management#group-naming-convention). It is a simpler alternative to [SCIM](/langsmith/user-management#set-up-scim-for-your-organization) for self-hosted organizations whose IdP can include groups in the OIDC token but cannot easily run SCIM provisioning. For IdP-side configuration (claim, scope) refer to the [SSO Groups Sync section in the OIDC SSO setup guide](/langsmith/self-host-sso#sso-groups-sync). For settings reference and behavior, see the [main SSO Groups Sync documentation](/langsmith/user-management#sso-groups-sync-alternative). ### Disabling organization creating By default, any user can create an organization in LangSmith. For self-hosted customers, an admin may want to restrict this ability after setting up initial organizations. This feature flag allows an admin to disable the ability for users to create new organizations. #### Configuration The `userOrgCreationDisabled` feature flag is set to `true` by default for organizations using [basic auth](/langsmith/self-host-basic-auth) or [SSO](/langsmith/self-host-sso). ```yaml Helm theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} config: userOrgCreationDisabled: true ``` ```bash Docker theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} # In your .env file FF_ORG_CREATION_DISABLED="true" ``` ### Disabling personal organizations By default, any user who logs in to LangSmith will have a personal organization created for them. For self-hosted customers, an admin may want to restrict this ability. This feature flag allows an admin to disable the ability for users to create personal organizations. #### Configuration The `personalOrgsDisabled` feature flag is set to `true` by default for organizations using [basic auth](/langsmith/self-host-basic-auth) or [SSO](/langsmith/self-host-sso). ```yaml Helm theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} config: personalOrgsDisabled: true ``` ```bash Docker theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} # In your .env file FF_PERSONAL_ORGS_DISABLED="true" ``` ### Disabling personal access token creation This feature requires Helm chart version 0.13.12 (application version 0.13.12) or later. By default, users can create Personal Access Tokens (PATs) in any organization. For self-hosted customers, an admin may want to globally disable PAT creation across all organizations. This environment variable allows an admin to prevent users from creating new PATs in any organization on the instance. To disable PAT creation for a single organization instead, see the [per-organization API option](/langsmith/manage-organization-by-api#security-settings). #### Configuration ```yaml Helm theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} commonEnv: - name: PAT_CREATION_DISABLED value: "true" ``` ```bash Docker theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}} # In your .env file PAT_CREATION_DISABLED="true" ``` ***
[Connect these docs](/use-these-docs) to Claude, VSCode, and more via MCP for real-time answers. [Edit this page on GitHub](https://github.com/langchain-ai/docs/edit/main/src/langsmith/self-host-user-management.mdx) or [file an issue](https://github.com/langchain-ai/docs/issues/new/choose).