> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://support.granitegrc.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How do I add new users to the system?

| The method for adding users depends on your organization's configuration. First, find out whether you are using **Azure AD/SSO provisioning** (automatic) or **manual user accounts.**

**If Azure AD/SSO is enabled (automatic provisioning):**
* Add the user to your organization's **Azure AD** and grant them access to the application (for example, through an Enterprise Application, security groups, or SCIM provisioning).
* Ask the user to sign in to the system once using the designated SSO sign-in URL. The user account will be created automatically upon the first sign-in.
* Open **Admin view in Granite → Users** or **Roles** and assign the required roles and responsible-person settings.
* **Note:** You cannot create the account manually, and permissions cannot be assigned until the user account has been created through the first sign-in or SCIM provisioning.

**If manual user accounts are used:**
* Open **Admin view → Users → Add New User**.
* Enter the user's email address and other required information. Make sure an account with the same email address does not already exist.
* Assign the appropriate roles and permissions to the user. If necessary, permissions can be expanded later through the **Roles** view.
* Save the user. Instruct the user to follow the login instructions sent to their email. If the email is not received, ask them to set a password using the **"Forgot your username or password?"** link on the login page.

**Common tips and troubleshooting:**
* **The "Add" function does not work or the email field returns an error:** The account may already exist in another group or may be deactivated. Search for the user by email address, reactivate the account, and update their roles.
* **An external user cannot sign in:** Verify that they are using the correct login URL and ask them to use the **"Forgot Password?"** function if necessary.
* **Do not create a new account** if you only want to grant additional access to an existing user for another business unit. Instead, add the required roles and permissions through the user's profile or the **Roles** view.
* **The search field is not visible or is obstructed in the user interface:** Try another browser, refresh the page, or adjust the browser zoom level. Contact support if the issue persists.
* **Removing or deactivating old accounts:** Follow your organization's established process or submit a support request if you do not have permission to perform the action yourself.

|| If needed, your organization's IT team can enable SCIM provisioning, allowing users and groups to synchronize automatically from Azure AD.