# Manage user roles

A user must have an <u>**organization role**</u> to participate in a Redox organization. To view or participate in the environments within the organization, a user must have an <u>**environment role**</u> for each one. [Learn more about user roles](/basics/managing-access-for-your-redox-organization/what-are-user-roles). 

## Definitions

<details>
<summary>Organization role</summary>

A user’s <u>**organization role**</u> determines their administrative capabilities and access within a Redox organization. There are three types of organization roles:

- owner
- admin
- member

When a user is invited to an organization, they’re assigned to a <u>**member**</u> organization role by default.
A user’s organizational role doesn’t impact their assigned environment role.

</details>

<details>
<summary>Environment role</summary>

A user’s <u>**environment role**</u> determines their technical capabilities and access within an environment of a Redox organization. There are three types of environment roles:

- observer (default role in <u>**production**</u> environments)
- support
- engineer (default role in <u>**staging**</u> and <u>**development**</u> environments)

Some of these roles have overlapping permissions and capabilities, but usually for different purposes within the environment. A user’s environment role doesn’t impact their assigned organization role.

</details>

## Prerequisites

- A user must be assigned to an <u>**organization owner**</u> role to manage organization roles.
- A user must be assigned to either an <u>**organization owner**</u> or <u>**admin**</u> role to manage environment roles. [Learn more about user roles](/basics/managing-access-for-your-redox-organization/what-are-user-roles).

## View user roles

1. Log in to the dashboard.
2. Click **your username** at the bottom of the navigation menu.
3. From the user menu, select the **Access control** option**.**
4. By default, the <u>Users</u> tab opens with a list of the organization’s users with their corresponding email address and assigned organization role. 


![The Users table shows a list of active organization users with their email and organization role.](https://images.ctfassets.net/cl3wt5ehhnlv/34AEmNKV691wKF5moz1rUu/0c5a7be021489496415b9af3688f79cc/access-control-users.png)

*View user organization roles*

 
5. To view a list of a specific user’s assignments, click the **three-dots** **icon** in their row. 
6. Select the **Edit roles** option from the drop-down menu.  


![The Edit roles option is the first option in the Action drop-down menu. ](https://images.ctfassets.net/cl3wt5ehhnlv/42MGXuJoE8xq9TUkNFec1p/a571c01ff2573d90357185dd157b9372/access-control-edit-roles.png)

*Edit roles option*


7. The user’s role profile opens with all their current organization and environment role assignments. 


![The organization and environment role assignments appear at the bottom of the user's profile.](https://images.ctfassets.net/cl3wt5ehhnlv/SAP4MQLCvGOjPzp4t1ZaL/bc5b998fc706c6fe61a6141ee12b13a9/access-control-user-profile.png)

*A user's profile*



> **Different roles for different environments**
>
> Remember that a user can have different role assignments in different environments. For example, a user can be assigned to an <u>engineer</u> role in a <u>development</u> environment but an <u>observer</u> role in a <u>production</u> environment. Or, a user might not be assigned an environment role at all (i.e., they have no access to the environment).

## Change a user’s organization role

By default, a user is assigned to a <u>member</u> role in a Redox organization. Change a user’s role in their user profile.

1. Follow the steps to view a user’s roles.
2. Under the <u>Organization role</u> section, click the **Edit** button. 
3. From the <u>Current role</u> drop-down, select the **organization** **role** you want to assign to this user. 
4. (Optional) Click the **View changes** option to see a change log summary with how many permissions the user will gain or lose. 
5. Click the **Save** button. Or click the **Cancel** button to discard any changes.

![A user's organization role is changed from member to admin to elevate their permissions. ](https://images.ctfassets.net/cl3wt5ehhnlv/7GbCDIFdyIi2Sr7z022woH/bd19799004b01702125180517d91470b/access-control-change-org-role.gif)

*Change a user's organization role*



## Change or remove a user’s environment role

1. Follow the steps to view a user’s roles.
2. Under the <u>Environment roles</u> section, click the **Edit** button.  
3. From any of the <u>Current role</u> drop-downs, select the **environment** **role** you want to assign to this user. To remove a user’s access to an environment, select the **No role assigned** option. 
4. (Optional) Click the **View changes** option to see a change log summary with how many permissions the user will gain or lose. 
5. Click the **Save** button. Or click the **Cancel** button to discard any changes.


![A user's environment role is changed from engineer to member in the development environment. ](https://images.ctfassets.net/cl3wt5ehhnlv/2EZUM700lywovVafYobWsb/e4ba1a551d3eefd6c7ce60fa5d2f5159/access-control-change-environment-role.gif)

*Change a user’s environment role*



> **Platform API endpoints**
>
> This article describes how to manage user roles in the <u>Redox dashboard</u>. To manage user roles via <u>API</u>, use these <u>Redox Platform API</u> endpoints instead:
>
> - [Get organization roles](https://docs.redoxengine.com/permalink/c5916b35-060e-5a01-bc33-924b4f516397-get-org-roles)
> - [Update organization role](https://docs.redoxengine.com/permalink/fcdbdc8e-5c38-56e2-940c-bfa962978494-put-org-role)
> - [Remove organization role](https://docs.redoxengine.com/permalink/1a40b017-4e0a-5f22-8d74-baf25d322113-delete-org-role)
> - [Get environment roles](https://docs.redoxengine.com/permalink/e53121b4-3946-5579-944a-c704030fb8c1-get-env-roles)
> - [Assign environment role](https://docs.redoxengine.com/permalink/3772a5ac-b389-5e6e-89c4-a3ab30569b43-post-env-role)
> - [Update environment role](https://docs.redoxengine.com/permalink/25cc4571-9dd5-5cdc-b8b6-8ec342ec5324-put-env-role)
> - [Remove environment role](https://docs.redoxengine.com/permalink/9a482386-b85b-5cf3-925b-3ff6b9cbc178-delete-env-role)
>
> Just note you can only assign an organization role is by adding a user to an organization in the dashboard. [Learn how to add a user](/how-to-use-redox/manage-your-redox-setup/add-a-user-to-a-redox-organization). 
