# Assign roles
#### Scope
This document explains how Administrators can assign, view, and manage roles for users within the organization using the **User Management** module.
It covers individual role assignment, role inheritance from groups, and basic role management actions.
***
#### I am new. Where should I start?
If you are new, start from the **User Management** page under the **Administrator** menu.
From there, you can open a user’s details and manage the roles assigned to that user.
***
**Purpose**
The purpose of this feature is to allow Administrators to:
* Control user access by assigning appropriate roles
* View roles assigned directly to a user
* View roles inherited from groups
* Add or remove roles when responsibilities change
***
**Prerequisites**
Before proceeding, ensure that:
* You are logged in with an **Administrator** or **Role Management** permission
* The user already exists in the organization
* Required roles have been created and configured
***
#### I already understand. How do I proceed step by step?
***
**1. Open User Management**
* Navigate to **Administrator**
* Select **Users**
* Open the **User Management** page
→ You will see a list of all users with their email, phone number, registration date, status, and last activity.
***
**2. Open User Details**
* Click on a user name in the list
→ The **User details** panel is displayed on the right side.
***
**3. Open Roles Tab**
* In the User details panel, select the **Roles** tab
→ You can view:
* **Individual roles** (roles assigned directly to the user)
* **Roles inherited from Groups** (read-only)
***
**4. Manage Roles**
* Click **Manage role**
→ The **Manage role** dialog is displayed.
***
**5. Select Roles**
* Click **Select role**
* Search and choose one or more roles from the list
* **Example roles**:
* Super Admin (Org Admin)
* Group Manager
* Workspace Manager
* Help Desk
***
**6. Save Changes**
* Confirm the selected roles
* Close the dialog
→ The assigned roles are applied immediately and appear in the user’s role list.
***
**Result**
* The user gains permissions based on the assigned roles
* Assigned roles are tracked with assigned date and assigned by
* Group-inherited roles remain managed through Groups and cannot be edited here
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://oten.gitbook.io/identity-support/user-guide/business-account/administrator/team-and-access/assign-roles.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.