> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://help.sigmacomputing.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://help.sigmacomputing.com/_mcp/server.

# Guest User Accounts

> Create Sigma guest user accounts for external vendors. Password-authenticated access limited to assigned teams with strict security controls.

Guest user accounts are password authenticated and allow you to enforce strictly limited access to your organization. Among other security-based limitations, guest users cannot view or request access to content outside of their assigned teams. Guest user accounts are recommended when working with external vendors.

Before guest users can be invited to your organization, this feature must be enabled by an admin.

## Requirements

* You must be assigned the Admin [account type](/docs/create-and-manage-account-types).
* Guest user accounts do not work if your organization uses [SCIM for team and user provisioning](/docs/manage-users-and-teams-with-scim).

## Guest User Permissions

Guest users can be assigned to any non-Admin [account type](/docs/account-type-and-license-overview).

Guest users are unique in that they only have access to [workspaces associated with teams](/docs/manage-teams) to which they are assigned. Unlike standard users, guest users have the following restrictions:

* Cannot access workspaces shared with **All Members**.
* Are not automatically granted access to folders and documents shared with **All Members**.
* Cannot request access to documents.
* Can only interact with users assigned to the same team(s).
* Cannot access the Sigma REST API.

All guest users automatically have access to the [Sigma Sample Connection](/docs/sigmas-sample-connection).

## Guest User Authentication

Guest user accounts are always password [authenticated](/docs/manage-password-authentication), regardless of whether the organization uses an identity provider (e.g. Okta, Azure) for other users.

If your organization transitions to [SCIM for team and user provisioning](/docs/manage-users-and-teams-with-scim), guest user accounts will no longer work and guest users will be unable to log in to Sigma.

## Allow Guest Users Accounts in Your Organization

1. [Open your Admin Portal](/docs/access-the-administration-portal).
2. Click **Authentication** to open the authentication page.
3. In the **Authentication Method & Options** section, click **Edit** button.
4. Turn on the **Allow Guest Access** toggle.
5. Click **Save**.

## Invite a Guest User to Your Organization

1. Open the user menu. Click your profile icon, located in the top right corner of the screen.

2. In the menu, select **Invite users**.

   The **Invite people to your Sigma organization** modal opens.

3. For **Enter email addresses to invite new users**, enter one or more email addresses. If you invite multiple users, separate each email address with a comma.

4. Select the **Invite as guest users** checkbox.

5. From the **Select Account Type** dropdown, select an account type.

6. (Optional) For **Add a custom message**, enter a message to include in the emailed invitation.

7. (Optional) For **Assign Teams**, select one or more teams to assign the user to. Guest users only have access to workspaces associated with their assigned teams.

8. Click **Invite**.

## Disable guest user accounts

To disable guest user accounts across your organization, do the following. When you disable this feature, all existing guest accounts are automatically deactivated.

To disable an individual guest user, see [Deactivate users](/docs/deactivate-users).

1. [Open the Admin portal](/docs/access-the-administration-portal).
2. Click **Authentication** to open the authentication page.
3. In the **Authentication Method & Options** section, click **Edit**.
4. Turn on the **Allow Guest Access** toggle.
5. Click **Save**.

## Related resources

* [User account types](/docs/user-account-types)
* [Create and manage teams](/docs/manage-teams)