> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.goautonomous.io/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management

> Add users, manage their group memberships, and view their effective permissions across the platform.

## Overview

The Users page is where you add new users to Go Autonomous, control who they are, and see exactly what each user has access to. Permissions are inherited from the user groups a user belongs to — there are no per-user permission overrides. Every change you make here flows through to the rest of the platform automatically.

Find it under **Administration → Access Control → Users**.

<Note>
  If SCIM is set up for your organisation, users are provisioned automatically from your identity provider — they appear in the Users table without anyone having to add them manually. You can still add users manually for cases where SCIM doesn't reach.
</Note>

## Multiple group memberships

Users can belong to more than one group. When a user's groups have different permission levels for the same space, product, or administration area, the user inherits the **broader** of the available permissions for each dimension.

For example: if Group A grants Pulse Viewer access and Group B grants Pulse Editor access, a user in both groups will have Pulse Editor access.

## The Users page

The Users page lists everyone with access to your Go Autonomous environment. Each row shows:

| Column       | What it shows                                                                                               |
| ------------ | ----------------------------------------------------------------------------------------------------------- |
| Name         | The user's avatar (initials), full name, and an SSO indicator if they're synced from your identity provider |
| Email        | The address they use to sign in                                                                             |
| Groups       | Up to two group names; if a user belongs to more, a `(+X)` count appears                                    |
| Last Sign In | A relative timestamp (e.g. "2 days ago") or "Never"                                                         |
| Created      | When the user was first added to Go Autonomous                                                              |

Use the **search bar** above the table to filter by name or email. The result count is shown beneath the search input.

## Add a user

<Steps>
  <Step title="Click Add User">
    The Add User dialog opens.
  </Step>

  <Step title="Enter the user's details">
    Provide the **Full Name** and **Email Address**. Both are required.
  </Step>

  <Step title="Assign to a group">
    Pick a group from the **Assign to Group** dropdown. Every user must belong to at least one group — that's how their permissions are determined.
  </Step>

  <Step title="Add the user">
    Click **Add User**. The new user appears in the table and immediately inherits all permissions from their assigned group.
  </Step>
</Steps>

## Edit a user

Click any row in the table to open the user details sheet on the right. Once a user has been assigned to a group, the details sheet shows exactly what they can access through that group — area access, intent access, page access, and product permissions. From the same sheet you can:

* Update the user's **first name** and **last name**.
* Change their **group memberships**.
* Trigger a **password reset**.

The user's email address cannot be changed after creation.

## Delete users

You can delete users individually using the action on each row, or in bulk by selecting multiple rows and choosing **Delete Selected**. Deleted users immediately lose access to the platform.

## View a user's effective permissions

Click any user to open their details sheet. The **Effective Permissions** section shows the merged result of every group they're a member of:

* **Role badges** — global administrator, IT administrator, or area administrator labels, where applicable.
* **Area access** — every area the user can reach, with the access level (Edit or View) for each.
* **Intent access** — the first six allowed intents, with a `(+X more)` overflow if the user has access to more.
* **Page access** — the first eight pages, with overflow handling the same way.

This view is the easiest way to answer "what can this user actually do?" without opening every group they belong to.