--- title: "Granting Access to Clarity" slug: "granting-access-to-clarity" description: "This guide will walk you through granting access to Clarity, or create a new local user with Clarity access." tags: ["Clarity", "entitlement", "Getting started"] updated: 2024-06-21T16:26:40Z published: 2024-06-21T16:26:40Z canonical: "help.claritysecurity.com/granting-access-to-clarity" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # Granting Access to Clarity This quick guide will help you learn how to grant Clarity access to a new user. We will also explain how use of SSO impacts user access to Clarity. ## Granting Access Manually If this is the first time you are granting access to a user, please follow the quick steps outlined below. > [!NOTE] > New Identity > > If you are creating a new Identity from scratch, then the first step is to head to the Identities page and hit the **Add New Identity** button. You will need to populate this form with the required fields (First Name, Last Name, Email, and Organizational Units). Then, you can just follow the instructions below to grant access to this new Identity. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Grant Clarity Login and Manage Access buttons(1).png?sv=2026-02-06&spr=https&st=2026-11-12T16%3A34%3A28Z&se=2026-11-12T17%3A34%3A28Z&sr=c&sp=r&sig=7X2xEmul%2F%2BR3HAKwlHbd3rqf%2BQPsbiw7MLjyTAiyE%2F0%3D) ### How to Grant Access to an Identity 1. Locate the Identity (or create one, **see above**) in the Identity Explorer. 2. Click the **Grant Clarity Login** button (see **below** for details on what this button does) 3. Now this Identity has the ability login to the platform 4. Provide them the instructions to reset their password 1. [How to Reset your Password](/docs/how-to-reset-your-password) ([https://help.claritysecurity.com/docs/how-to-reset-your-password](https://help.claritysecurity.com/docs/how-to-reset-your-password)) > [!TIP] > Grant Clarity Login > > Clicking this button on an Identity page performs several actions: > > - This Service User is marked to allow local login. > - [Base User](/docs/clarity-entitlements) Entitlement is added to the Clarity Service User for this Identity. > - [End User](/docs/clarity-entitlements) Entitlement is added to the Clarity Service User for this Identity. ### Add Additional Clarity Entitlements If you want to add additional access for this User, check out the [Clarity Entitlements](/docs/clarity-entitlements) available. Then follow the steps below to add them. You may want to make this user a Manager, Admin, Access Certification Admin, etc. This will allow the user to perform additional actions in Clarity. 1. On the same page where you found the **Grant Clarity Login** button, click the **Manage Access** button. 2. Narrow the scope to Clarity by typing **“Clarity”** in the Application column. 3. Click **SELECT** next to the Entitlements you wish to grant. 1. They should changed to **SELECTED** 4. Once you have selected all the Entitlements you wish to grant, then click either **Grant Permanent Access** or **Grant Temporary Access.** 1. For Temporary Access use the date selector (on the left) to choose an expiration date (default is 3 months from today). ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1718826791487.png?sv=2026-02-06&spr=https&st=2026-11-12T16%3A34%3A28Z&se=2026-11-12T17%3A34%3A28Z&sr=c&sp=r&sig=7X2xEmul%2F%2BR3HAKwlHbd3rqf%2BQPsbiw7MLjyTAiyE%2F0%3D) ## Automatic Access (SSO) When a user successfully logs into Clarity for the first time using your configured [SSO](https://help.claritysecurity.com/docs/single-sign-on) they will be automatically granted at least the Base User and End User entitlements. This automatic access process is explained in more detail below. ### First time logging in with SSO If you have SSO correctly configured for Clarity and login for the first time: 1. User attempts to log in to Clarity, which redirects to the SSO provider of your choice. The user enters their credentials into this 3rd party login page. 2. SSO Provider either approves or denies the login attempt (based on group membership), and tells Clarity whether the login was successful. 3. Clarity will add the **Base User** and **End User** entitlements, and add the user to the list of accounts with the ability to log in. 4. Clarity will also grant **Manager** entitlement if the user is currently assigned as a Reviewer on any Access Reviews (at the time of first login only). 5. The user is redirected back to Clarity logged in, with their new access. Check out [Clarity Entitlements](/docs/clarity-entitlements) to learn more about the Entitlement mentioned above. --- ## Need help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. An identity is a single entity's (employee, contractor, service account) grouping of service users, attributes, and assigned entitlements. Organizational Units are a top down hierarchical structure used to generate Roles in Clarity. An identity is a single entity's (employee, contractor, service account) grouping of service users, attributes, and assigned entitlements. A Service User is a user, or service account, discovered by Clarity in a downstream application. An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies. A Reviewer is responsible for deciding whether access or other **Access Review** items are appropriate or inappropriate. In Clarity this is typically a Supervisor or an Application/Entitlement Owner.