> For the complete documentation index, see [llms.txt](https://docs.certinext.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.certinext.io/documentation/user-roles-and-access-control/role-based-access-control/editing-an-existing-users-role.md).
# Editing an Existing User's Role
#### Who Can Edit User Roles
The Administrator can edit any user, including changing their role. The Manager can edit user details but cannot add new users or assign the Administrator role. A Manager cannot grant a role that carries more permissions than their own - in practice, this means a Manager cannot assign the Administrator role to anyone.
#### Step-by-Step: Changing a User's Role
*Navigate to Settings > Users & Roles.* The Users list is displayed. Locate the user and click the View button in their Action column. On the user's profile page, click the Edit (pencil) icon. In the Assign Role section, click the radio button next to the new role. Click Save. The role updates immediately - the user does not need to log out and back in for the change to take effect.
#### How Access Changes When a Role Is Modified
When a user is upgraded from Basic User to Manager, they gain billing access (credits and statements), visibility of all certificates and orders, Settings management (users and groups), Reports, CA connectors, and Domains management. No access is lost - Manager is a superset of Basic User permissions.
When a user is downgraded from Manager to Discovery User, they gain full Discovery module access and additional integration views, but lose billing management, Settings administration, most reporting capabilities, and the ability to revoke, suspend, or edit certificates across the account.
When a user is downgraded from Manager to Standard User, they lose the ability to add credits, download billing statements, manage users, edit account configuration, and perform most CA management tasks. They retain broad read visibility but lose all write capabilities beyond their own records.
Downgrading a role immediately revokes access to all modules not included in the new role. Any work the user has in progress in those modules may be interrupted, so it is advisable to notify the user before making the change.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.certinext.io/documentation/user-roles-and-access-control/role-based-access-control/editing-an-existing-users-role.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.