> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agents.kolena.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Users

> Grant Access within your Organization

User membership controls who can login to Kolena within your Organization. To manage this membership, click "Manage Organization" from your user profile or navigate to [your Organization page](https://agents.kolena.com/organization?tab=users).

<Note>
  Each Organization has an allowed number of Users [according to its tier](/tiers#user-seats-by-tier).
</Note>

## Add Users

To add a new User to your Organization:

1. Click "Add User" from the Organization page
2. Enter the User's email address and select a role
3. Click "Add" to send an invitation and grant access to the User
4. The User can now accept the invitation and join your Organization

<Note>
  User membership can also be synchronized from an existing system SSO system like Entra ID. See [SCIM Setup](/scim-setup) for details.
</Note>

## Assign Roles

All Users are assigned one of the following roles:

* `viewer`
* `editor`
* `admin`

Based on their role, Users can perform the following actions:

| Action                                             | `viewer` | `editor` | `admin` |
| :------------------------------------------------- | :------: | :------: | :-----: |
| View Agents                                        |     ✅    |     ✅    |    ✅    |
| View Integrations                                  |     ✅    |     ✅    |    ✅    |
| View Dashboards                                    |     ✅    |     ✅    |    ✅    |
| View Prompt results                                |     ✅    |     ✅    |    ✅    |
| Upload Runs                                        |     ✅    |     ✅    |    ✅    |
| Comment on Prompt results                          |     ✅    |     ✅    |    ✅    |
| Override Prompt results                            |     ✅    |     ✅    |    ✅    |
| Create API Keys                                    |     ✅    |     ✅    |    ✅    |
| Create/Modify/Delete Agents                        |     ❌    |     ✅    |    ✅    |
| Create/Modify/Delete Agent Data Retention Policies |     ❌    |     ✅    |    ✅    |
| Create/Modify/Delete Integrations                  |     ❌    |     ✅    |    ✅    |
| Create/Modify/Delete Dashboards                    |     ❌    |     ✅    |    ✅    |
| Create/Modify/Delete Ground Truths and Validation  |     ❌    |     ✅    |    ✅    |
| Create/Modify/Delete Folders                       |     ❌    |     ✅    |    ✅    |
| Create/Modify/Delete Prompts                       |     ❌    |     ✅    |    ✅    |
| Manage Organization Users                          |     ❌    |     ❌    |    ✅    |
| Manage all API Keys API keys and Service Users     |     ❌    |     ❌    |    ✅    |
| Manage Organization Data Retention Policies        |     ❌    |     ❌    |    ✅    |

<Note>
  Enterprise customers can assign roles at the Workspace or Agent level. See{" "}
  <a href="/fine-grained-access-control">Fine Grained Access Control</a> for
  details.
</Note>