# Manage users You can view a list of your Dashboard users, and manage their access, roles, and permissions. ## View users Anyone with the _View the list of users on the account_ permission can access the _Roles and permissions_ page from the _Settings menu_ > _Settings_ page, which lists all the account's users. Depending on your entity access and business needs, you can filter the list to find users whose details you can edit. The _Account owner_ can view and manage all users for all entities on the account. If your organization uses single sign-on, user management is handled by your third-party identity provider (IdP) and is not available within the Dashboard. The _Roles and permissions_ page provides an overview of all users, including their roles and user status. The _Last login_ column reflects the three possible user statuses: - `Pending` – The user has been invited to your Dashboard but hasn't yet accepted the invite or set up their sign in details. Invites expire after seven days. - `[Timestamp]` – The user has accepted the invite. The date and timestamp show the last time they accessed the Dashboard. - `Expired` – The user did not accept the invite in time and it expired. To resend it, next to the status, select _Resend invite_. To view more information or edit a user's details, select a row. The _User profile_ page is displayed. --- ## Add a user To add a user, you must have the Admin user role. You can add as many users to your Dashboard as needed. You must provide each user’s email and role, as well as the entities you want them to have access to. The users then receive an invitation email with instructions to activate their account. New user invites expire after seven days. If the new user does not activate their account within that timeframe, an Admin needs to resend the invite. 1. Sign in to the [Dashboard](https://dashboard.checkout.com/). 2. Select the _Settings menu_ in the top navigation bar, and then select _Settings_. 3. On the _Settings_ page, under _Team settings_, select _Roles and permissions_. 4. On the _Roles and permissions_ page, under _Users_, select _New user_. 5. On the _New user_ page: - Under _Settings_, enter the user's _Email address_. - Under _Access to entities and entity segments_, turn on the toggle for the specific entities and entity segments you want the user to have access to.
Alternatively, to give the user access to all existing and future entity segments, select _Grant full access_. - Under _Permissions_, from the _Role_ dropdown, select the user's role.
You can select a pre-defined role or a custom role you've previously created. For more details, see [Create a custom role](https://www.checkout.com/docs/business-operations/use-the-dashboard/manage-users/user-permissions.md#Create_a_custom_role).
If you select the Admin role, the access granularity is restricted at the legal entity level. 6. Select _Save user_.
A confirmation message appears and the new _User profile_ page is displayed.
The new user's _Last active_ status is `Pending`. When they activate their account, this is replaced with `[Timestamp]`. > **Note** > > You can only assign a user to entities that you have access to. Once added, another Admin can amend the user’s access if required. --- ## Edit a user To edit an existing user's role and entity access, you must have the Admin user role. To update an existing user's role to a custom role, you must first [create the custom role](https://www.checkout.com/docs/business-operations/use-the-dashboard/manage-users/user-permissions.md#Create_a_custom_role). 1. Sign in to the [Dashboard](https://dashboard.checkout.com). 2. Select the _Settings menu_ in the top navigation bar, and then select _Settings_. 3. On the _Settings_ page, under _Team settings_, select _Roles and permissions_. 4. On the _Roles and permissions_ page, under _Users_, select the user you want to update. 5. On the _User profile_ page, select _Edit user_. 6. On the _Edit user_ page, under _Permissions_, from the _Role_ dropdown, update the user's role. 7. Under _Access to entities and entity segments_, review the user's access to specific entities and entity segments.
Alternatively, to revoke the user's access to all existing and future entity segments, select _Revoke access_. 8. Select _Save user_ to confirm. The user's details are updated. --- ## Delete a user To delete a user to revoke all their access rights and completely remove them, you must have the Admin user role. 1. Sign in to the [Dashboard](https://dashboard.checkout.com). 2. Select the _Settings menu_ in the top navigation bar, and then select _Settings_. 3. On the _Settings_ page, under _Team settings_, select _Roles and permissions_. 4. On the _Roles and permissions_ page, under _Users_, select the user you want to delete. 5. On the _User profile_ page, select _Manage user_ and then select _Delete user_.
6. In the confirmation dialog that appears, select _Delete user_ to confirm.
A confirmation message appears and the user is removed from the _Roles and permissions_ overview. --- ## Revoke Dashboard access If you suspect that a user's Dashboard account is compromised, you can revoke their Dashboard access. The user cannot access the Dashboard until their [access is restored](#Restore_Dashboard_access). To revoke Dashboard access, you must have the Admin or IAM Admin user role. 1. Sign in to the [Dashboard](https://dashboard.checkout.com). 2. Select the _Settings menu_ in the top navigation bar, and then select _Settings_. 3. On the _Settings_ page, under _Team settings_, select _Roles and permissions_. 4. On the _Roles and permissions_ page, under _Users_, select the user whose access you want to revoke. 5. On the _User profile_ page, select _Manage user_, and then select _Revoke access_.
6. In the confirmation dialog that opens, select _Revoke access_ to confirm. --- ## Restore Dashboard access To restore Dashboard access, you must have the Admin or IAM Admin user role. 1. Sign in to the [Dashboard](https://dashboard.checkout.com). 2. Select the _Settings menu_ in the top navigation bar, and then select _Settings_. 3. On the _Settings_ page, under _Team settings_, select _Roles and permissions_. 4. On the _Roles and permissions_ page, under _Users_, select the user whose access you want to restore. 5. On the _User profile_ page, select _Manage user_, and then select _Restore access_.
6. In the confirmation dialog that opens, select _Restore access_ to confirm. --- ## Unlock a user account If a user enters incorrect sign-in details too many times, their account is locked automatically and the Dashboard displays a `Locked` status for that user. This is different from an Admin [revoking a user's access](#Revoke_Dashboard_access) in that a locked account results from failed sign-in attempts, not a manual action. Unlock the account to let the user sign in again. To unlock a user account, you must have the Admin or IAM Admin user role. 1. Sign in to the [Dashboard](https://dashboard.checkout.com). 2. Select the _Settings menu_ in the top navigation bar, and then select _Settings_. 3. On the _Settings_ page, under _Team settings_, select _Roles and permissions_. 4. On the _Roles and permissions_ page, under _Users_, select the user you want to unlock. 5. On the _User profile_ page, select _Manage user_, and then select _Unlock user_. 6. In the confirmation dialog that opens, select _Unlock user_ to confirm. The user's account is unlocked and they can sign in again. --- ## Transfer account ownership If you have the _Account Owner_ user role, you can transfer the account ownership to a user with the Admin user role. 1. Sign in to the [Dashboard](https://dashboard.checkout.com). 2. Select the _Settings menu_ in the top navigation bar, and then select _Settings_. 3. On the _Settings_ page, under _Team settings_, select _Roles and permissions_. 4. On the _Roles and permissions_ page, under _Users_, select the user you want to transfer the ownership to. 5. On the _User profile_ page, select _Manage user_ > _Transfer ownership_.
6. In the confirmation dialog that appears, enter your password, and then select _Transfer ownership_. The _Account Owner_ role is transferred to the specified user. As the previous owner, your user role changes to Admin. If the current owner is no longer with your organization, a user with the Admin user role can [request support](https://dashboard.checkout.com/support/new?topic=case_account_management_and_access&issue=issue_account_changes) with the following information: - Proof that the current owner is inactive - Details of the new owner, who must be an existing user with Admin user role - [User Permissions](https://www.checkout.com/docs/business-operations/use-the-dashboard/manage-users/user-permissions.md): Control what individual users and groups of users can see and do in the Dashboard. - [User activity](https://www.checkout.com/docs/business-operations/use-the-dashboard/manage-users/user-activity.md): View and download logs of all user activity on your Dashboard account.