> For the complete documentation index, see [llms.txt](https://docs.globalalerting.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.globalalerting.com/administration/access-control/managing-user-roles.md).

# Managing User Roles

{% hint style="info" icon="user-lock" %}
These actions require the **View User Roles**, **Add User Role**, **Edit User Role** and **Delete User Role** permissions.
{% endhint %}

## Understanding User Roles

A role is a collection of user permissions that are assigned to user accounts to grant access to functions within GAP. Two roles are available pre-configured:

* Administrator
* User

Users have limited access to functions within GAP and can only manage devices that are explicitly assigned to them.

Administrators have full access to all devices and functions within their tenant (and any sub-tenants).

If you need to set up more granular permissions for your users, you can create your own roles and assign them to your users.

Like other objects within GAP, roles are created within a tenant and are not available outside of that tenant.

## Adding User Roles

{% hint style="info" %}
it is not possible to create roles within greater permissions than are assigned to your own role.
{% endhint %}

1. From the GAP Admin home page, click "Roles" under the "Access Control" section.
2. Click the "+ New Role" button.
3. Enter a name for the role in the "New role name" text box.
4. Select a tenant in which the new role will reside from the "Tenant" drop-down list.
5. If you want the new role to be available for assignment to users in sub-tenants of the selected tenant, leave the "Available to sub-tenants" checkbox checked.
6. Assign the required permissions to the role.  See the [User Roles Reference](/administration/access-control/user-roles-reference.md) guide for a description of each permission.
7. When complete, click the "Save Changes" button.

## Duplicating User Roles

It can be more efficient to base a new role on an existing one.  Roles can be duplicated so they can act as a baseline for new roles.

1. From the GAP Admin home page, click "Roles" under the "Access Control" section.
2. Click on the name of the role you want to duplicate.
3. Click the "Duplicate Role" button.
4. Enter a name for the role in the "New role name" text box.
5. Select a tenant in which the new role will reside from the "Tenant" drop-down list.
6. If you want the new role to be available for assignment to users in sub-tenants of the selected tenant, leave the "Available to sub-tenants" checkbox checked.
7. Assign the required permissions to the role.  See the [User Roles Reference](/administration/access-control/user-roles-reference.md) guide for a description of each permission.
8. When complete, click the "Save Changes" button.

{% embed url="<https://vimeo.com/1179068855?fe=ci&fl=sv&share=copy>" %}

## Editing User Roles

1. From the GAP Admin home page, click "Roles" under the "Access Control" section.
2. Click on the name of the role you want to edit.
3. Click the "Duplicate Role" button.
4. To rename the role, click the "Rename" button next to the role name.
5. Enter a new role name and click the "Save" button.
6. If you want to change whether the new role to be available for assignment to users in sub-tenants of the selected tenant, toggle the "Available to subtenants" option as required.
7. Assign the required permissions to the role.  See the [User Roles Reference](/administration/access-control/user-roles-reference.md) guide for a description of each permission.
8. When complete, click the "Save Changes" button.

## Deleting User Roles

1. From the GAP Admin home page, click "Roles" under the "Access Control" section.
2. Click on the name of the role you want to delete.
3. Click the "Delete Role" button.
4. At the confirmation dialog, click the "Delete Role" button.