> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# User management

> Manage who has access to your Oleria workspace - add users, assign roles, and control permissions across your team.

Manage the people who have access to your Oleria workspace. From this section you can add new users, assign roles that control what each person can see and do, and remove access when someone leaves.

## User attributes

Each user account contains the following fields:

| Field         | Description                                                                                                                                                                                                          |
| :------------ | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name          | Full name of the user. Retrieved from your organization's authentication source when the user first logs in. May be blank if the user has not yet logged in or if the authentication source does not include a name. |
| Email address | Email address used to add the user. This is the address the user needs to log in via your organization's authentication source.                                                                                      |
| Status        | Current access state. **Active** - the user has access to the workspace based on their assigned role.                                                                                                                |
| Roles         | Roles assigned to the user that define their permissions in the Oleria workspace.                                                                                                                                    |

## Roles

Oleria uses roles to group permissions and control what each user can see and do in the workspace. The following built-in roles can be assigned to users. These default roles cannot be edited.

| Default role                | Description                                                                                                                                                                                                                                           |
| :-------------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Administrator               | The most complete access level: user management, integrations, and administrative settings such as SSO configuration, webhooks, and OAuth applications. Some modules are view-only for every role, including Administrator, while they're rolled out. |
| Operator                    | Access to all Adaptive Security features and can manage connected integrations. Cannot manage workspace users.                                                                                                                                        |
| Analyst                     | View-only access to Adaptive Security and connected integrations. Suitable for read-only reporting and investigation.                                                                                                                                 |
| Governance Operator         | Access to all Governance features, including access reviews, identity lifecycle, access bundles, and access requests. Can view connected integrations but not modify them. Cannot manage workspace users.                                             |
| Identity Lifecycle Operator | Access to identity lifecycle, access bundles, and access requests. Can view connected integrations but not modify them. Cannot run access reviews or manage workspace users.                                                                          |

## Permissions by role

Each role includes a specific set of permissions across modules. See [Default user roles](/administration/default-user-roles) for the full permissions matrix.

## Topics in this section

<CardGroup cols={2}>
  <Card title="Manage users" href="/administration/manage-users">
    Add new users, update roles, and remove users from your workspace.
  </Card>

  <Card title="Default user roles" href="/administration/default-user-roles">
    Understand the built-in roles and the permissions each one grants.
  </Card>

  <Card title="Update a user's role" href="/administration/update-a-users-role">
    Change the role assigned to an existing user.
  </Card>

  <Card title="Remove a user" href="/administration/remove-a-user">
    Remove a user's access to the Oleria workspace.
  </Card>

  <Card title="User attributes" href="/administration/user-attributes">
    Reference for the fields stored on each user account.
  </Card>
</CardGroup>

## Contact us

For questions, contact us at [support@oleria.com](mailto:support@oleria.com).