Every user listed in your identity provider (e.g. Microsoft Entra ID, connected via SAML or OpenID Connect) can access Tacto; user management is handled entirely by your IT.
In Tacto (Settings → Workspace → User Management), signed-in users are listed but cannot be added or deleted – only Deactivate is possible.
You still assign Groups and roles in Tacto (see "Managing users, Groups & roles").