---
title: "Assign a Role"
description: "How to give a user or team a role, and what changes for them."
canonical: "https://docs.cm.com/governance/guides/customers/assign-a-role"
---

# Assign a Role

> How to give a user or team a role, and what changes for them.

Source: https://docs.cm.com/governance/guides/customers/assign-a-role

Assigning a role gives a user or a team the permissions in that role. You do it in the User Management view of the Governance portal.

You need the Governance **Editor** permission on the account.

## Steps

1. Open **User Management** and select the user or team.
2. Choose the **role**.
3. Choose the **scope**: one account, or the whole organization.
4. Optional: enter a **resource** to limit the role to specific resources. Leave it blank for all resources. If you enter one, also choose the application it belongs to.
5. Save.

| Field | What to enter |
| - | - |
| Principal | The user or team that gets the role. |
| Role | What they can do. |
| Scope | Where it applies: an account or the organization. |
| Resource | What they can do it on. Blank means all. |

## Change several assignments at once

One save can add, change and remove assignments together. Each change is processed on its own. If some fail, the rest still go through, and you see how many succeeded and which ones failed.

## Good to know

- Assigning a role the person already has changes nothing.
- You can't change the user, team or scope of an existing assignment. Delete it and create a new one.
- Removing an assignment deletes it.
- Every change appears in the [change log](https://docs.cm.com/governance/guides/customers/view-logs).

## Related

- [Role assignments](https://docs.cm.com/governance/guides/core-concepts/role-assignments)
- [Roles](https://docs.cm.com/governance/guides/core-concepts/roles)
- [Resources](https://docs.cm.com/governance/guides/core-concepts/resources)
- [Create a team](https://docs.cm.com/governance/guides/customers/create-a-team)