A user inherits roles from all groups to which the user belongs. You can also assign roles directly to a user. Whenever a user is assigned a new role, it only takes effect after logging in with a new session.

Before you begin

Role required: user_admin or admin

When possible, simplify user administration by assigning roles to groups. Create groups that contain all the roles necessary for specific personas, and then assign users to those groups.

About this task

To grant the admin role to a user, you must also have the admin role. To grant the security_admin role to a user, you must also have the security_admin role, and must elevate to the security_admin role before granting the security_admin role to other users. See Elevate to a privileged role.
Note:

The System administrator(admin) role provides access to all system features, functions, and data, regardless of security constraints. Avoid assigning this role to your users when more targeted roles are available.

You cannot delete roles that are assigned to the group from the user record. You must remove the user from the group record.

Procedure

  1. Navigate to All > User Administration > Users and then open a user record.
  2. In the Roles related list, click Edit.
  3. In the Collection list, select the desired roles, and then click Add.
  4. Click Save.

What to do next

Note: If the user is logged in when you update their roles, the user may need to log out and back in again if they are unable to access records allowed by the new role.