Editing an Existing User's Role

Who Can Edit User Roles

The Administrator can edit any user, including changing their role. The Manager can edit user details but cannot add new users or assign the Administrator role. A Manager cannot grant a role that carries more permissions than their own - in practice, this means a Manager cannot assign the Administrator role to anyone.

Step-by-Step: Changing a User's Role

Navigate to Settings > Users & Roles. The Users list is displayed. Locate the user and click the View button in their Action column. On the user's profile page, click the Edit (pencil) icon. In the Assign Role section, click the radio button next to the new role. Click Save. The role updates immediately - the user does not need to log out and back in for the change to take effect.

How Access Changes When a Role Is Modified

When a user is upgraded from Basic User to Manager, they gain billing access (credits and statements), visibility of all certificates and orders, Settings management (users and groups), Reports, CA connectors, and Domains management. No access is lost - Manager is a superset of Basic User permissions.

When a user is downgraded from Manager to Discovery User, they gain full Discovery module access and additional integration views, but lose billing management, Settings administration, most reporting capabilities, and the ability to revoke, suspend, or edit certificates across the account.

When a user is downgraded from Manager to Standard User, they lose the ability to add credits, download billing statements, manage users, edit account configuration, and perform most CA management tasks. They retain broad read visibility but lose all write capabilities beyond their own records.

Downgrading a role immediately revokes access to all modules not included in the new role. Any work the user has in progress in those modules may be interrupted, so it is advisable to notify the user before making the change.