---
title: Users
description: The three roles, what each can do, and how to change someone's role.
---

_[console.superalign.ai/users](https://console.superalign.ai/users)_

The Users page shows a count per role and a table of everyone with **Name** (and email), **Role**, and **Last Active**.

| Role | Can |
| --- | --- |
| **Admin** | Everything: see all data, take action on assets, change extensions, create tokens, change roles |
| **Auditor** | See every page, including sessions and the Audit Log. Change nothing |
| **Member** | See only their own endpoint, the Users list, Downloads, and Requests, where they can ask an Admin for access to an asset |

Endpoints enrolled through MDM get the role of the person they are assigned to, or Member if no person is set. That decides what the endpoint's own desktop app can show.

## Before you begin

- You have the **Admin** role. Other roles see the list but cannot change it.

## Change a role

1. **Find the person**

    On the Users page, find their row.

2. **Open their panel**

    Click the row. A panel opens on the right.

3. **Change the role**

    Open the role menu and choose **Admin**, **Member**, or **Auditor**.

The change is immediate and written to the [Audit Log](/surface/activity/audit-log). You cannot change your own role.

## Keeping the list in sync

Connect [Google Workspace](/surface/hub/identity-access/google-workspace) or [Entra ID or Okta](/surface/hub/identity-access/entra-okta) and the Users page follows your directory.

## Next steps

- [Connect Google Workspace](/surface/hub/identity-access/google-workspace) or [Entra ID or Okta](/surface/hub/identity-access/entra-okta) to sync users automatically
- [Audit Log](/surface/activity/audit-log) to see every role change