Summary and recommendation
Rippling user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.
Rippling is a workforce management platform that functions as an identity provider (IdP), provisioning access to every app your team uses from a single HR record.
It spans HR Cloud, IT Cloud, and Finance Cloud under a modular pricing model - you pay only for the products you activate.
The base Unity platform seat runs ~$8/user/mo with a $35/mo minimum base fee;
module costs layer on top and require a direct quote from Rippling sales.
Quick facts
| Admin console path | App Switcher → IT Cloud → Admin Console (or HR Cloud → Company Settings for HR-specific admin tasks) |
| Admin console URL | Official docs |
| SCIM available | No |
| SCIM tier required | From $8/user/mo + modules |
| SSO prerequisite | No |
User types and roles
| Role | Permissions | Cannot do | Plan required | Seat cost | Watch out for |
|---|---|---|---|---|---|
| Super Admin | Full access to all Rippling modules, settings, billing, and user management across HR Cloud, IT Cloud, and Finance Cloud. Can create and assign custom roles. | Included with any Rippling subscription | Counted as a standard Rippling seat | Only Super Admins can modify other Super Admin accounts. Rippling recommends limiting Super Admin access to a small number of users. | |
| Custom Admin (Role-Based) | Scoped access defined by custom permission sets. Can be limited to specific modules (e.g., Payroll only, Benefits only, IT only), specific employee groups, or specific actions (view, edit, approve). | Cannot exceed the permissions of the Super Admin who created the role. Cannot access modules not included in the company's Rippling subscription. | Custom roles available on standard Rippling subscriptions; granularity may depend on which modules are purchased | Counted as a standard Rippling seat | Permission sets are scoped per module. An admin with HR permissions does not automatically have IT Cloud permissions. |
| Employee (End User) | Access to self-service portal: view pay stubs, update personal info, manage benefits elections, access company apps provisioned via IT Cloud. | Cannot manage other users, access admin settings, or view other employees' data. | Included with any Rippling subscription | Counted as a standard Rippling seat (~$8/user/mo base platform fee) | Employees are added as part of the onboarding workflow; they cannot be added as a standalone user account without an associated worker record. |
| Contractor | Limited self-service access; can receive payments via Rippling if Contractor Payments module is active. Access to provisioned apps if IT Cloud is configured. | Cannot access full employee self-service features such as benefits enrollment unless specifically configured. | Contractor Payments is a separate purchasable module | Billing varies by module; contractors may be billed differently than full employees depending on contract | Contractors are managed separately from employees in the worker type classification. Misclassification between employee and contractor affects payroll tax handling. |
Permission model
- Model type: hybrid
- Description: Rippling uses a hybrid model combining predefined built-in roles (Super Admin, standard employee) with fully customizable role-based permission sets. Admins can create custom roles scoped by module, employee group (e.g., by department, location, employment type), and action type (view, edit, approve, manage). Permissions are enforced per Rippling module (HR Cloud, IT Cloud, Finance Cloud) independently.
- Custom roles: Yes
- Custom roles plan: Available on standard Rippling subscriptions; specific granularity tied to purchased modules
- Granularity: Module-level, employee-group-level, and action-level (view/edit/approve). Admins can restrict a role to manage only employees in a specific department or location.
How to add users
- Log in to Rippling at app.rippling.com as an admin with employee management permissions.
- Navigate to HR Cloud → Employees (or the main People section).
- Click 'Add Employee' or 'Start Onboarding'.
- Enter required worker information: legal name, work email, start date, employment type (employee or contractor), department, and work location.
- Select the employee's compensation details and job information.
- Choose which apps and devices to provision (if IT Cloud is active).
- Assign any applicable benefits, payroll, and compliance tasks.
- Send the onboarding invitation; the new user receives an email to complete their profile and set up their account.
Required fields: Legal first and last name, Work email address, Start date, Employment type (employee or contractor), Department, Work location, Compensation type and amount, FLSA classification (exempt/non-exempt for US employees)
Watch out for:
- Adding a user triggers the full onboarding workflow including payroll, benefits, and IT provisioning steps - admins must complete or skip each section before the record is saved.
- Work email must be unique; Rippling does not allow duplicate email addresses across active or terminated worker records.
- If IT Cloud is active, app provisioning rules may automatically assign software licenses upon hire, which can affect billing immediately.
- Rippling requires a minimum of 5 employees on the account.
- International employees may require additional country-specific modules (Rippling Global) which are separately priced.
| Bulk option | Availability | Notes |
|---|---|---|
| CSV import | Yes | HR Cloud → Employees → Import Employees (CSV upload option available during initial setup and ongoing) |
| Domain whitelisting | No | Automatic domain-based user add |
| IdP provisioning | Yes | Rippling itself acts as an IdP and provisions users to connected third-party apps; inbound provisioning from external IdPs (Okta, Entra, Google Workspace) is not natively supported as Rippling is the source of truth |
How to remove or deactivate users
- Can delete users: No
- Delete/deactivate behavior: Rippling does not permanently delete employee records. Removing a user is handled through the 'Terminate Employee' workflow, which deactivates the worker record and triggers offboarding tasks. The record is retained in a terminated/inactive state for compliance, payroll history, and reporting purposes. Terminated records can be viewed under the 'Terminated' filter in the Employees list.
- Log in to Rippling at app.rippling.com as an admin with termination permissions.
- Navigate to HR Cloud → Employees and locate the employee record.
- Open the employee profile and click 'Terminate Employee' (or use the action menu).
- Enter the termination date, termination reason, and whether the departure is voluntary or involuntary.
- Review and complete offboarding tasks: final paycheck processing, benefits termination, equipment retrieval, and app deprovisioning.
- Confirm the termination. Rippling will automatically trigger configured offboarding workflows including revoking access to provisioned apps (if IT Cloud is active).
| Data impact | Behavior |
|---|---|
| Owned records | Employee's HR record, payroll history, and documents are retained in Rippling in a terminated state. Admins can access historical data for compliance and reporting. |
| Shared content | Access to shared company apps provisioned via IT Cloud is revoked automatically upon termination if offboarding automation is configured. |
| Integrations | Connected third-party app accounts (e.g., Slack, Google Workspace, Microsoft 365) are deprovisioned automatically based on configured offboarding rules in IT Cloud. Manual deprovisioning may be required for apps not connected to Rippling. |
| License freed | Software licenses assigned through IT Cloud are released back to the license pool upon termination, making them available for reassignment. Billing adjustments depend on the billing cycle of each connected app. |
Watch out for:
- Termination date determines when access is revoked; setting a future termination date means the employee retains access until that date.
- Final paycheck processing must be handled within Rippling Payroll before or at termination; state-specific final pay laws are not automatically enforced - admins must configure compliance settings.
- If the employee has outstanding expense reports or approvals, these must be resolved before or after termination as the workflow does not automatically block termination.
- Rehiring a terminated employee reactivates their existing record rather than creating a new one, preserving historical data.
- Benefits termination (e.g., health insurance) follows the plan's termination rules (end of month vs. last day of employment) and must be verified against carrier requirements.
License and seat management
| Seat type | Includes | Cost |
|---|---|---|
| Rippling Unity Platform Seat | Core platform access, employee self-service, basic HR data management. Required for all workers on the platform. | ~$8/user/mo (base platform fee; $35/mo minimum monthly base fee also applies) |
| HR Cloud Module Seats | Payroll, Benefits Administration, Time & Attendance, Learning Management, etc. Each module is priced separately per employee. | Varies by module; HR Cloud bundles reported at $15–$29/employee/mo depending on modules selected |
| IT Cloud Module Seats | Device Management, App Management, Identity (SSO/directory), Network access. Modular pricing per product. | Modular; specific per-seat pricing requires a quote from Rippling sales |
| Finance Cloud Module Seats | Corporate cards, expense management, accounts payable. Modular pricing. | Modular; specific per-seat pricing requires a quote from Rippling sales |
- Where to check usage: IT Cloud → App Management → [Select App] → view assigned users and license count; HR Cloud → Employees → filter by Active to see billable headcount
- How to identify unused seats: IT Cloud → App Management allows admins to view per-app user assignments and identify employees assigned to an app who have not logged in within a configurable period. Rippling does not have a native 'unused license' dashboard across all apps; identification requires reviewing each connected app individually.
- Billing notes: Rippling uses modular pricing - each HR, IT, and Finance Cloud product is billed separately per employee per month. The base Unity platform fee (~$8/user/mo) applies to all seats plus a $35/mo base fee. Adding or removing employees mid-cycle affects billing on a prorated basis. Some products (e.g., ATS) have reported base fees of $4,000+ annually regardless of headcount. A minimum of 5 employees is required. All pricing is quote-based and not publicly listed; figures cited are based on reported ranges.
The cost of manual management
Rippling's modular structure means total cost scales with the products you enable. HR Cloud bundles are reported at $15–$29/employee/mo depending on modules selected; IT Cloud and Finance Cloud are separately quoted.
Some products, such as the ATS, carry reported base fees of $4,000+ annually regardless of headcount. A minimum of 5 employees is required across the account. Because pricing is not publicly listed, teams frequently report difficulty forecasting total cost as modules are added over time.
What IT admins are saying
Community evidence is not specific enough to quote or summarize yet for this app.
The decision
Rippling is a strong fit for teams that want a single platform to manage HR, IT, and Finance workflows and are willing to invest in configuration upfront. The hybrid permission model - combining Super Admin, custom role-based access, and module-level scoping - gives precise control over every app and every employee group.
Teams with simpler needs or tighter budgets should weigh the modular cost structure carefully, particularly if international payroll (Rippling Global) is required, as that is a separate, higher-cost module not included in standard HR Cloud pricing.
Bottom line
Rippling centralizes the full employee lifecycle - from onboarding to offboarding - and pushes provisioning to every app through its IT Cloud layer. The platform rewards teams that invest in configuration: automated workflows, granular role scoping, and app provisioning rules reduce ongoing manual work significantly.
The tradeoffs are real - modular pricing escalates with adoption, support response times are reported as slow outside enterprise tiers, and any app not connected via IT Cloud falls outside Rippling's automated offboarding coverage.
Automate Rippling workflows without one-off scripts
Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.