> ## Documentation Index > Fetch the complete documentation index at: https://docs.maadify.com/llms.txt > Use this file to discover all available pages before exploring further. # Users > Manage user access, permissions, and tenant memberships ## What users represent Use the **Users** page to invite users, assign roles, and control access for your company and the companies you manage. The page includes three views, based on your permissions: * **My Company's Users**: users who belong to your current tenant. * **Managed Company Users**: users who belong to owned or managed tenants. * **Manage Roles**: role definitions that group permissions. Users list showing roles and status badges ## User access model Maadify controls access through roles. A role contains one or more permissions, such as `users.read`, `connectors.update`, or `parent_agents.create`. You can assign system roles for common access profiles, or create custom roles when users need a more specific set of permissions. Assign roles based on what the user needs to do: * Use `users.*` permissions to manage users in your own tenant. * Use `tenant_users.*` permissions to manage users in owned or managed tenants. * Use `roles.*` permissions to view, create, update, or delete role definitions. * Use `admin_portal.access` to give a user access to the admin portal. Without this permission, the user only has access to the chat interface. Give users the smallest set of roles that supports their responsibilities. ## Add a user to your company Open **My Company's Users** and select **Add User**. Enter the user's email, first name, last name, and job title. Search for the roles the user needs and add them to the user. The user receives an invitation email. The user appears with **Pending** status until they accept the invitation. Add User dialog showing email, name, job title, and role selection fields ## Add a user to a managed company Use **Managed Company Users** when you need to create or manage users for an owned or managed tenant. Open **Managed Company Users** and select **Add Company User**. Search for the company and select it from the tenant picker. Enter the user's email, first name, last name, and job title. Add the roles the user should have in that managed company. Add Company User dialog showing company search and role selection ## Roles for managed company users Managed company users can only be assigned roles that are available to that tenant. For tenant users, Maadify shows non-system roles that have **Shared Role** enabled. Shared roles let an owning tenant define a role once and make it available to owned tenants. This is useful when you want managed companies to use the same access model, such as a standard viewer role or operator role. Sharing a role only makes the role available for assignment in owned tenants. It does not automatically create users, assign the role to existing users, or grant access to unrelated connected tenants. Role selector showing shared roles available to assign to a managed company user For detailed role creation steps and the full permission catalog, see [Role management](/roles). ## User statuses * **Pending**: the user has been invited but has not accepted the invitation. * **Confirmed**: the user accepted the invitation and can sign in. ## Manage existing users Open a user row to view details, change assigned roles, resend an invite, reset access, or remove the user. Users cannot change their own assigned roles. To change your access, ask another administrator with the required user update permission. ## Required permissions You need the matching permission for the area you want to manage: * `users.read`, `users.create`, `users.update`, and `users.delete` control users in your own tenant. * `tenant_users.read`, `tenant_users.create`, `tenant_users.update`, and `tenant_users.delete` control users in owned or managed tenants. * `roles.read` shows the **Manage Roles** view. * `roles.create`, `roles.update`, and `roles.delete` control role creation, edits, and deletion.