SCIM (System for Cross-domain Identity Management) is a standard protocol used to automate user provisioning between identity providers (IdPs) and service providers like the Mistral AI services.
While SCIM helps streamline the creation and management of user accounts, it's important to understand how roles are assigned during this process.
Current SCIM Support and Role Assignment
Currently, the Mistral AI platform offers basic support for SCIM provisioning.
🔑 When new users are automatically created in your organization via SCIM, they are always assigned the default Member role, regardless of any group memberships or role information potentially sent by the IdP during the provisioning process.
This means that if you require users provisioned through SCIM to have elevated privileges (such as the Admin or Billing role), an existing organization Admin must manually update the user's role after their account has been created via SCIM.
🔎 You can manage user roles through the platform's user management interface. For more details, refer to our Role Based Access Control (RBAC) guide.