> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User management

> Manage who has access to your Oleria workspace - add users, assign roles, and control permissions across your team.

Manage the people who have access to your Oleria workspace. From this section you can add new users, assign roles that control what each person can see and do, and remove access when someone leaves.

## User attributes

Each user account contains the following fields:

| Field         | Description                                                                                                                                                                                                          |
| :------------ | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name          | Full name of the user. Retrieved from your organization's authentication source when the user first logs in. May be blank if the user has not yet logged in or if the authentication source does not include a name. |
| Email address | Email address used to add the user. This is the address the user needs to log in via your organization's authentication source.                                                                                      |
| Status        | Current access state. **Active** - the user has access to the workspace based on their assigned role.                                                                                                                |
| Roles         | Roles assigned to the user that define their permissions in the Oleria workspace.                                                                                                                                    |

## Roles

Oleria uses roles to group permissions and control what each user can see and do in the workspace. The following built-in roles can be assigned to users. These default roles cannot be edited.

| Default role                | Description                                                                                                                                        |
| :-------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------- |
| Administrator               | Full access to all features and settings.                                                                                                          |
| Operator                    | Access to Adaptive Security (except remediations) and can manage connected integrations.                                                           |
| Analyst                     | View-only access to Adaptive Security.                                                                                                             |
| Governance Operator         | Access to all Governance features, including access bundles. Can view connected integrations but not modify them.                                  |
| Identity Lifecycle Operator | Access to identity lifecycle, access bundles, and access requests. Cannot run access reviews. Can view connected integrations but not modify them. |

## Permissions by role

Each role includes a specific set of permissions across modules:

| Module                                               | Administrator                                                        | Operator                                                             | Analyst                           | Governance Operator                                            | Identity Lifecycle Operator                                    |
| :--------------------------------------------------- | :------------------------------------------------------------------- | :------------------------------------------------------------------- | :-------------------------------- | :------------------------------------------------------------- | :------------------------------------------------------------- |
| Manage Users                                         | View all users, Add a user, Update user, Remove user                 | No access                                                            | No access                         | No access                                                      | No access                                                      |
| Access Reviews                                       | Manage access reviews                                                | View                                                                 | View                              | Manage access reviews                                          | No access                                                      |
| Identity Lifecycle, Access Bundles & Access Requests | Manage identity lifecycle, access bundles, and access requests       | View                                                                 | View                              | Manage identity lifecycle, access bundles, and access requests | Manage identity lifecycle, access bundles, and access requests |
| Integrations                                         | View all integrations, Add integration, Delete integration           | View all integrations, Add integration, Delete integration           | View all integrations             | View all integrations                                          | View all integrations                                          |
| Ticketing                                            | Create Ticket, View Ticket, Add/View/Delete Ticket Management System | Create Ticket, View Ticket, Add/View/Delete Ticket Management System | Create Ticket, View Ticket        | Create Ticket, View Ticket                                     | Create Ticket, View Ticket                                     |
| Remediation                                          | Disable Account, Revoke Access                                       | No access                                                            | No access                         | No access                                                      | No access                                                      |
| Action Center                                        | View, Undo Action                                                    | View                                                                 | View                              | View                                                           | View                                                           |
| Access Graph                                         | View                                                                 | View                                                                 | View                              | View                                                           | View                                                           |
| Risk Monitoring                                      | View, Export CSV from Risk Detail                                    | View, Export CSV from Risk Detail                                    | View, Export CSV from Risk Detail | View, Export CSV from Risk Detail                              | View, Export CSV from Risk Detail                              |
| Activity Analysis                                    | View, Export CSV                                                     | View, Export CSV                                                     | View, Export CSV                  | View, Export CSV                                               | View, Export CSV                                               |
| Account Utilization                                  | View, Export CSV, Disable Account                                    | View, Export CSV                                                     | View, Export CSV                  | View, Export CSV                                               | View, Export CSV                                               |
| Group Utilization                                    | View, Export CSV                                                     | View, Export CSV                                                     | View, Export CSV                  | View, Export CSV                                               | View, Export CSV                                               |
| Access Inventory                                     | View, Export CSV, Revoke Access                                      | View, Export CSV                                                     | View, Export CSV                  | View, Export CSV                                               | View, Export CSV                                               |
| Notifications                                        | View                                                                 | View                                                                 | View                              | View                                                           | View                                                           |

## Topics in this section

<CardGroup cols={2}>
  <Card title="Manage users" href="/administration/manage-users">
    Add new users, update roles, and remove users from your workspace.
  </Card>

  <Card title="Default user roles" href="/administration/default-user-roles">
    Understand the built-in roles and the permissions each one grants.
  </Card>

  <Card title="Update a user's role" href="/administration/update-a-users-role">
    Change the role assigned to an existing user.
  </Card>

  <Card title="Remove a user" href="/administration/remove-a-user">
    Remove a user's access to the Oleria workspace.
  </Card>

  <Card title="User attributes" href="/administration/user-attributes">
    Reference for the fields stored on each user account.
  </Card>
</CardGroup>

## Contact us

For questions, contact us at [support@oleria.com](mailto:support@oleria.com).
