> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://support.granitegrc.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How do I assign access roles to users?

| You can assign access roles to users through the **Admin view**, provided that you have **admin user privileges**.

**Basic Steps:**
* First, determine which tool or module (e.g., **ERM**, **Audit**, **Work Risks**) the role is needed for, which asset, area, or organizational unit the role should apply to and what level of access is required (**read-only**, **read and edit**, or **admin**).
* Open **Admin view** by clicking your name in the top-right corner and selecting **Admin**. Then navigate to **Roles**.
* Locate the role you want to assign to the user.
* Click **Users** on the right side of the role. In the **Add this role to users** field, search for the user you want to assign the role to. Once you have selected the desired user(s), click **Add Selected Users**.
* Ask the user to verify that they can access the functions and content associated with the new role. If the user was logged into the system while the role was assigned, ask them to log out and log back in for the changes to take effect.

**If the role does not exist yet:**
* Contact **Granite Support** to have the role created, or follow your organization's internal procedures for creating new roles.

**Troubleshooting:**
* I can't find the role: The role may not exist yet, or you may not have permission to manage it. Contact **Granite Support** to add the role to the list of assignable roles or to create the role if it does not already exist.
* The role does not provide access to the required assets or features: Verify that you assigned the correct role or combination of roles.
* The user cannot see the changes: Ask the user to log out and log back in. If the issue persists, contact **Granite Support**.

Note about externally managed roles**:**
* Some roles may be assigned centrally through **Microsoft Entra ID**, **Azure AD**, or other directory services. In these cases, the role is not assigned within the Granite system. Instead, access must be requested according to your organization's procedures, typically through the **IT department**.