> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cortex.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Assigning roles to users and teams

> Add or remove roles for individual users, multiple users, or teams, and set the default role for new users.

From the **Permissions** page, you can see every user and team in your workspace along with their roles. You can add or remove roles for one user at a time, update many users at once, assign roles to whole teams, and choose the role that new users get when they first log in.

To make changes on this page, you need the **Configure Roles** permission, which is included in the Admin role by default. To learn how roles and permissions work, see [Roles and permissions](https://docs.cortex.io/configure/settings/managing-users/permissioning).

## Accessing the Permissions page

1. From the main sidebar, click your avatar in the bottom-left corner.
2. Select **Settings**.
3. From the **Settings** menu, locate the **Security and access** section, then click **Permissions**. The **Permissions** tab opens by default. It shows the **Default role** for your workspace at the top, followed by a list of users and teams.

   ![The Permissions page in Cortex.](https://mintcdn.com/cortex-290c0c42/7v_vtI6fNuuxUc7R/images/settings-permissions.png?fit=max\&auto=format\&n=7v_vtI6fNuuxUc7R\&q=85\&s=25d4f35302b92ac41f4044451672a9e7)

## Finding a user or team

Select **Users** or **Teams** above the list to switch between them. Each row shows the user's or team's current roles.

![](https://mintcdn.com/cortex-290c0c42/t7nB8cA924Z5llbb/images/permissions-users-teams.png?fit=max\&auto=format\&n=t7nB8cA924Z5llbb\&q=85\&s=648d1162650fb93aaa01581a2d5c7453)

* **Search** - Type a name in the search box in the upper-right corner of the list.
* **Filter** - Click **Filter**, choose **Last login** or **Role**, set your filter, then click **Apply**.
* **Sort** - Click **Name** to sort the list alphabetically.

## Adding or removing roles for a user

Use the edit side panel to add roles, remove a single role, or clear all of a user's roles. You don't need to reselect the roles you want to keep.

1. On the **Permissions** tab, select **Users**.
2. Locate the user, then click the **pencil icon** in their row.
3. In the side panel, do any of the following:
   * To add a role, use the **Add a role** dropdown.
   * To remove a single role, click **Remove** next to that role under **Assigned roles**.
   * To remove all roles at once, click **Remove all**.
4. Click **Save changes**.

> [!NOTE]
>
> Every user needs at least one role. If you remove all of a user's roles, add at least one role back before you save.

## Adding roles to multiple users

1. On the **Permissions** tab, select **Users**.
2. Select the checkboxes next to the users you want to update.
3. In the toolbar that appears at the bottom of the list, click **Roles**, then select **Add roles**.
4. In the **Add roles to users** side panel, choose an option:
   * **Add to existing roles** - Keeps each user's current roles and adds the roles you select.
   * **Replace existing roles** - Removes each user's current roles and replaces them with the roles you select.
5. Select one or more roles from the dropdown.
6. Click **Add and save**.

> [!NOTE]
>
> You can't remove a single role from several users at once, because the same role may not apply to everyone you selected. Instead, [edit each user individually](#add-or-remove-roles-for-a-user), or use **Replace existing roles** and select only the roles they should keep.

## Assigning roles to a team

When you assign a role to a team, every team member gets that role's permissions. People who join the team later get them automatically, too. This is a quick way to give the same access to everyone on a team without updating each user.

**To assign roles to a single team**:

1. On the **Permissions** tab, select **Teams**.
2. Find the team, then click the **pencil icon** in its row.
3. In the side panel, do any of the following:
   * To add a role, search for and select it under **Add a role**.
   * To remove a single role, click **Remove** next to that role.
   * To remove every role at once, click **Remove all**.
4. Click **Save changes**.

**To add roles to several teams at once**:

1. On the **Permissions** tab, select **Teams**.
2. Select the checkboxes next to the teams you want to update.
3. In the toolbar that appears at the bottom of the list, click **Roles**, then select **Add roles**.
4. Choose **Add to existing roles** or **Replace existing roles**, then select one or more roles.
5. Click **Add and save**.

## Setting the default role for new users

The default role is the role Cortex assigns to each new user when they log in for the first time. Choose a role with the least access most people need, then add more roles to individual users or teams as needed.

1. On the **Permissions** tab, find the **Default role** section at the top of the page.
2. Select a default or custom role from the dropdown.

   ![](https://mintcdn.com/cortex-290c0c42/t7nB8cA924Z5llbb/images/permissions-default-role.png?fit=max\&auto=format\&n=t7nB8cA924Z5llbb\&q=85\&s=83ea55d83a92b30cfab70d760fdd587a)

Changing the default role only affects users who log in for the first time after the change. It doesn't change the roles of existing users.


## Related topics

- [Custom roles](https://docs.cortex.io/configure/settings/managing-users/permissioning/custom-roles.md)
- [Viewing teams](https://docs.cortex.io/ingesting-data-into-cortex/entities-overview/entities/adding-entities/teams/viewing-teams.md)
- [Team roles](https://docs.cortex.io/ingesting-data-into-cortex/entities-overview/entities/adding-entities/teams/team-roles.md)