Assign a Role
Assigning a role gives a user or a team the permissions in that role. You do it in the User Management view of the Governance portal.
You need the Governance Editor permission on the account.
Steps
- Open User Management and select the user or team.
- Choose the role.
- Choose the scope: one account, or the whole organization.
- Optional: enter a resource to limit the role to specific resources. Leave it blank for all resources. If you enter one, also choose the application it belongs to.
- Save.
| Field | What to enter |
|---|---|
| Principal | The user or team that gets the role. |
| Role | What they can do. |
| Scope | Where it applies: an account or the organization. |
| Resource | What they can do it on. Blank means all. |
Change several assignments at once
One save can add, change and remove assignments together. Each change is processed on its own. If some fail, the rest still go through, and you see how many succeeded and which ones failed.
Good to know
- Assigning a role the person already has changes nothing.
- You can't change the user, team or scope of an existing assignment. Delete it and create a new one.
- Removing an assignment deletes it.
- Every change appears in the change log.