> For the complete documentation index, see [llms.txt](https://oten.gitbook.io/identity-support/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oten.gitbook.io/identity-support/user-guide/organization-admin-app/administrator/team-and-access/assign-roles.md).
# Assign roles
#### Scope
This document explains how Administrators can assign, view, and manage roles for users within the organization using the **User Management** module.
It covers individual role assignment, role inheritance from groups, and basic role management actions.
***
#### I am new. Where should I start?
If you are new, start from the **User Management** page under the **Administrator** menu.
From there, you can open a user’s details and manage the roles assigned to that user.
***
**Purpose**
The purpose of this feature is to allow Administrators to:
* Control user access by assigning appropriate roles
* View roles assigned directly to a user
* View roles inherited from groups
* Add or remove roles when responsibilities change
***
**Prerequisites**
Before proceeding, ensure that:
* You are logged in with an **Administrator** or **Role Management** permission
* The user already exists in the organization
* Required roles have been created and configured
***
#### I already understand. How do I proceed step by step?
***
**1. Open User Management**
* Navigate to **Administrator**
* Select **Users**
* Open the **User Management** page
→ You will see a list of all users with their email, phone number, registration date, status, and last activity.
***
**2. Open User Details**
* Click on a user name in the list
→ The **User details** panel is displayed on the right side.
***
**3. Open Roles Tab**
* In the User details panel, select the **Roles** tab
→ You can view:
* **Individual roles** (roles assigned directly to the user)
* **Roles inherited from Groups** (read-only)
***
**4. Manage Roles**
* Click **Manage role**
→ The **Manage role** dialog is displayed.
***
**5. Select Roles**
* Click **Select role**
* Search and choose one or more roles from the list
* **Example roles**:
* Super Admin (Org Admin)
* Group Manager
* Workspace Manager
* Help Desk
***
**6. Save Changes**
* Confirm the selected roles
* Close the dialog
→ The assigned roles are applied immediately and appear in the user’s role list.
***
**Result**
* The user gains permissions based on the assigned roles
* Assigned roles are tracked with assigned date and assigned by
* Group-inherited roles remain managed through Groups and cannot be edited here