> For the complete documentation index, see [llms.txt](https://docs.logilica.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.logilica.com/configuration/user-management.md).

# User Management

## What are Users?

Users are individuals of an organisation who have login access to the Logilica platform. These can be separate from [contributors](/configuration/managing-contributors.md), who contribute to engineering work and whose data is aggregated in the platform.

## Managing Users

Users can be managed by **Organisation Administrators** by navigating to **Settings -> Organisation -> Users**.

Organisation Administrators can invite and add new users, delete existing users or change their access roles.

<figure><img src="/files/y9WVp3AUTMRT8Dwoy3XG" alt="" width="563"><figcaption><p>Managing users and roles</p></figcaption></figure>

### Adding Users

New users can be added by providing their name, email and role. The email address will be used for them to activate their account. For security reasons, this invite is only valid for a limited period of time. However, it can be resent if the users do not activate their account within that period.

<figure><img src="/files/1Giph45tc8dkAjXttxTa" alt="" width="375"><figcaption><p>Inviting new users</p></figcaption></figure>

### Assigning User Roles

Each user is assigned a role relevant to their responsibilities. Roles can be assigned during user creation and changed later through the user management interface.

<figure><img src="/files/u2fvDpMOa2JVnU55qa7e" alt="" width="375"><figcaption><p>Assigning and changing user roles</p></figcaption></figure>

## Role-Based Access Control

Logilica follows the philosophy of data transparency and at a minimal level gives every invited user **Viewer** access. Data contributors do not have user access unless explicitly invited.

Logilica provides five user-assignable roles:

**Viewers** have read-only access. They can view all dashboards, export reports as PDFs, and access the query API.

**Data Managers** can view users, customise dashboards and charts, manage constant profiles, and access DataStudio.

**Team Leads** have everything Data Managers can do, plus the ability to create and manage teams and assign team members.

**Organisation Administrators** have full control over the domain: managing users, projects, connections, dashboards, API tokens, thresholds, and all organisation-wide settings.

If you require more fine-grained access control, Logilica also supports **custom roles**.

### Custom Roles

Organisation Administrators can create their own custom roles under **Settings -> Organisation -> Custom Roles**. A custom role has a name, an optional description, and an optional **parent role** — a custom role automatically inherits all access its parent role has, so you can build a hierarchy of roles rather than repeating the same permissions on each one.

Once created, a custom role can be assigned to users alongside their standard role, and used to scope access to individual dashboards and charts: when editing a dashboard or chart's access permissions, you can grant visibility to specific users or to everyone holding a given custom role (or a user group built from custom roles), rather than only to the standard role tiers above.

### Access Scopes

<table><thead><tr><th width="234"></th><th width="100" data-type="checkbox">System Admin</th><th width="100" data-type="checkbox">Admin</th><th width="100" data-type="checkbox">Team Lead</th><th width="100" data-type="checkbox">Data Manager</th><th data-type="checkbox">Viewer</th></tr></thead><tbody><tr><td>View dashboards</td><td>true</td><td>true</td><td>true</td><td>true</td><td>true</td></tr><tr><td>Export reports</td><td>true</td><td>true</td><td>true</td><td>true</td><td>true</td></tr><tr><td>Access query API</td><td>true</td><td>true</td><td>true</td><td>true</td><td>true</td></tr><tr><td>DataStudio access</td><td>true</td><td>true</td><td>true</td><td>true</td><td>false</td></tr><tr><td>Manage dashboards</td><td>true</td><td>true</td><td>true</td><td>true</td><td>false</td></tr><tr><td>Manage teams</td><td>true</td><td>true</td><td>true</td><td>false</td><td>false</td></tr><tr><td>Import new data sources</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Set thresholds &#x26; goals</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Create API tokens</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Upload data through API</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Manage user accounts</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Manage organisation settings</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Triage security findings</td><td>true</td><td>false</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Platform-wide system settings</td><td>true</td><td>false</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Advanced connector access</td><td>true</td><td>false</td><td>false</td><td>false</td><td>false</td></tr></tbody></table>
