Stitchflow
CloudTalk logo

CloudTalk User Management Guide

Manual workflow

How to add, remove, and manage users with operational caveats that matter in production.

UpdatedMar 9, 2026

Summary and recommendation

CloudTalk user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.

CloudTalk is a cloud call center platform with a two-role permission model: Administrator and Agent. Administrators hold full account access - billing, routing, IVR, integrations, and agent management - while Agents are scoped to their own call activity and softphone. There are no department-scoped admin roles or granular permission toggles documented for standard plans.

No native SCIM provisioning is documented. Every app in a modern identity stack that relies on automated lifecycle management will require a workaround here - either REST API calls or manual dashboard operations.

SSO via SAML (Okta, Entra ID, OneLogin) is available on Expert and Custom plans, but it does not trigger automatic deprovisioning in CloudTalk.

Quick facts

Admin console pathDashboard → Settings → Agents
Admin console URLOfficial docs
SCIM availableNo
SCIM tier requiredUnknown
SSO prerequisiteNo

User types and roles

Role Permissions Cannot do Plan required Seat cost Watch out for
Administrator Full access to dashboard settings, billing, call routing, IVR configuration, integrations, reporting, and agent management. Can add, edit, and deactivate agents. Cannot self-demote without another Administrator present; cannot access call recordings beyond retention window. All plans (Lite, Starter, Essential, Expert, Custom) Counts as a billable seat at the same per-user rate as the plan tier Administrator role is account-wide; there are no department-scoped admin roles documented in standard plans.
Agent Can make and receive calls, access personal call history, use the softphone/mobile app, and view own statistics. Cannot access account settings, billing, other agents' configurations, IVR/routing rules, or integrations. All plans Billable seat at plan rate (Lite $19, Starter $25–$34, Essential $29–$35, Expert $49/user/month) Each Agent consumes one paid seat regardless of activity level; there is no documented free viewer or read-only seat type.

Permission model

  • Model type: role-based
  • Description: CloudTalk uses a two-role model: Administrator and Agent. Administrators have full platform access; Agents have access limited to their own call activity and softphone. No custom roles or granular permission sets are documented in the help center for standard plans.
  • Custom roles: No
  • Custom roles plan: Not documented
  • Granularity: Coarse – two fixed roles only; no field-level or feature-level permission toggles documented for standard plans.

How to add users

  1. Log in to the CloudTalk Dashboard at my.cloudtalk.io as an Administrator.
  2. Navigate to Settings → Agents.
  3. Click 'Add Agent' (or the '+' button).
  4. Enter the agent's first name, last name, and email address.
  5. Assign a role (Administrator or Agent).
  6. Optionally assign the agent to one or more Groups (queues/teams).
  7. Optionally set an extension number.
  8. Click 'Save'. An invitation email is sent to the new user to set their password.

Required fields: First name, Last name, Email address, Role (Administrator or Agent)

Watch out for:

  • Adding an agent immediately creates a billable seat; billing adjusts at the next cycle.
  • The invitation email may land in spam; users must accept the invite before they can log in.
  • Phone number assignment is optional at creation but required before the agent can make outbound calls on some configurations.
  • No documented grace period – seat cost begins on the day the agent is added.
Bulk option Availability Notes
CSV import No Not documented
Domain whitelisting No Automatic domain-based user add
IdP provisioning Yes Expert or Custom (SSO required; JIT provisioning via SAML supported with Okta, Microsoft Entra ID, and OneLogin)

How to remove or deactivate users

  • Can delete users: No
  • Delete/deactivate behavior: CloudTalk does not expose a hard-delete option for agents in the standard dashboard UI. Agents can be deactivated (set to inactive), which prevents login and call handling while preserving their historical call data and recordings associated with that agent account.
  1. Log in to the CloudTalk Dashboard as an Administrator.
  2. Navigate to Settings → Agents.
  3. Locate the agent to be removed.
  4. Click the agent's name or the edit (pencil) icon to open their profile.
  5. Toggle the agent's status to 'Inactive' or use the deactivate option.
  6. Confirm the action. The agent loses dashboard and softphone access immediately.
Data impact Behavior
Owned records Call recordings and call logs associated with the deactivated agent are retained and remain accessible to Administrators in reporting and the call history section.
Shared content Groups (queues) the agent belonged to continue to function; the agent is simply removed from routing. Shared voicemail boxes and IVR assignments are unaffected.
Integrations CRM integration records (e.g., HubSpot, Salesforce contact associations) tied to the agent's calls are preserved in the CRM; the CloudTalk-side mapping may need manual cleanup.
License freed Deactivating an agent frees the seat for the next billing cycle. CloudTalk bills per active agent; inactive agents should not count toward the seat total, but timing of credit depends on billing cycle.

Watch out for:

  • No hard-delete means former employee data persists in the account indefinitely; verify data retention policies for compliance.
  • If the deactivated agent was the sole Administrator, the account may become unmanageable – ensure at least one other Administrator exists before deactivating.
  • Seat credit for a deactivated agent is not necessarily immediate; confirm with CloudTalk billing support for mid-cycle deactivations.
  • SSO-provisioned users deactivated in the IdP are not automatically deactivated in CloudTalk (no SCIM); manual deactivation in the CloudTalk dashboard is still required.

License and seat management

Seat type Includes Cost
Agent seat (all roles) One named user (Administrator or Agent role), softphone access, mobile app access, call history, and plan-tier features. Lite $19/user/month; Starter $25/user/month (annual) or $34/month; Essential $29/user/month (annual) or $35/month; Expert $49/user/month (annual); Custom – quote-based
AI Add-on AI-powered features (e.g., call transcription, sentiment analysis) layered on top of a standard seat. $9/agent/month (add-on, not a standalone seat type)
  • Where to check usage: Dashboard → Settings → Agents (shows list of all active/inactive agents and their status)
  • How to identify unused seats: Review the Agents list for agents with no recent call activity by cross-referencing Dashboard → Analytics → Agent Statistics, filtering by date range to identify zero-activity agents.
  • Billing notes: CloudTalk charges per active named user per month. Annual plans are billed upfront at the discounted rate. Monthly plans are billed at the higher month-to-month rate. Minimum 5 users on Custom plans. Adding agents mid-cycle may result in prorated charges; removing agents mid-cycle credit timing should be confirmed with CloudTalk support. 14-day free trial available; no credit card required for trial per marketing materials.

The cost of manual management

Adding an agent creates a billable seat immediately, with no documented grace period. Billing adjusts at the next cycle for additions, but mid-cycle credit timing for deactivations is unconfirmed - teams should verify directly with CloudTalk support.

There is no bulk CSV import for agents. At scale, every new hire requires a separate manual entry through Dashboard → Settings → Agents. Invitation emails frequently land in spam, which can delay onboarding and require follow-up.

Deactivating an agent in your IdP does not deactivate them in CloudTalk. Without a SCIM bridge, offboarding requires a separate manual step in the CloudTalk dashboard - a gap that creates real access-control risk for departing employees.

What IT admins are saying

Practitioners consistently flag three friction points with CloudTalk's identity management. First, the absence of SCIM documentation leaves teams without a supported path for automated provisioning.

Second, the two-role model (Administrator and Agent only) makes it impossible to grant team leads limited admin access without full account privileges. Third, mid-cycle deactivation credits are opaque, and multiple users report uncertainty about when billing actually adjusts.

Invitation email deliverability is a recurring operational complaint. New agents must accept the invite before they can log in, and spam filtering delays are common enough to warrant a proactive heads-up during onboarding.

Common complaints:

  • Lack of public documentation on identity management and SCIM provisioning.
  • No bulk CSV import for agents forces manual one-by-one user creation at scale.
  • Deactivating SSO users in the IdP does not automatically deactivate them in CloudTalk, creating a security gap for offboarding.
  • Only two fixed roles (Administrator and Agent) with no granular permissions, making it difficult to give team leads limited admin access.
  • Mid-cycle seat credit timing is unclear; users report uncertainty about when billing adjusts after deactivating an agent.
  • Invitation emails to new agents frequently reported as landing in spam folders, delaying onboarding.

The decision

CloudTalk fits teams that manage a modest, stable agent roster and can absorb manual provisioning overhead. If your organization has frequent headcount changes, strict offboarding SLAs, or a requirement that every app deprovision automatically on IdP deactivation, the lack of SCIM is a meaningful operational gap.

The coarse role model is a hard constraint for orgs that need tiered access - for example, team leads who can view reporting but cannot touch billing or routing. No workaround exists within standard plans.

Teams on Expert or Custom plans get SSO, which reduces login friction but does not solve lifecycle automation. Factor in the manual deprovisioning step as a standing process cost before committing at scale.

Bottom line

CloudTalk's manual user management is straightforward for small, stable teams but does not scale cleanly. No SCIM means every app that expects automated provisioning will need a compensating process - either REST API automation or a manual dashboard workflow.

The two fixed roles, opaque mid-cycle billing, and IdP-deactivation gap are the three constraints most likely to create operational debt as headcount grows. Teams with strict offboarding requirements or complex access-tier needs should weigh those gaps explicitly before expanding seat count.

Automate CloudTalk workflows without one-off scripts

Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.

Every app coverage, including apps without APIs
60+ app integrations plus browser automation for apps without APIs
IT graph reconciliation across apps and your IdP
Less than a week to launch, maintained as APIs and admin consoles change
SOC 2 Type II. ~2 hours of your team's time

UpdatedMar 9, 2026

* Details sourced from official product documentation and admin references.

Keep exploring

Related apps

Abnormal Security logo

Abnormal Security

API Only
AutomationAPI only
Last updatedMar 2026

Abnormal Security is an enterprise email security platform focused on detecting and investigating threats such as phishing, account takeover (ATO), and vendor email compromise. It does not support SCIM provisioning, which means every app in your stack

ActiveCampaign logo

ActiveCampaign

API Only
AutomationAPI only
Last updatedFeb 2026

ActiveCampaign uses a group-based permission model: every user belongs to exactly one group, and all feature-area access (Contacts, Campaigns, Automations, Deals, Reports, Templates) is configured at the group level, not per individual. The default Adm

ADP logo

ADP

API Only
AutomationAPI only
Last updatedFeb 2026

ADP Workforce Now is a mid-market to enterprise HCM platform that serves as the HR source of record for employee data — payroll, benefits, time, and talent. User access is governed by a hybrid permission model: predefined security roles (Security Maste