Org level

The Org Primary Owner (and any org-level Roles Admins) can assign individual members to system roles. They can also decide if the member will be able to manage the entire org or specific workspaces:

1. From your desktop, click your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click Organization settings.
3. Click Settings, then click Roles. 
4. Next to the system role you’d like to assign, click the  three dots icon and select Assign members.
5. Select members to assign, then click Next.
6. Choose whether these members will manage the org or specific workspaces, then click Save.

Workspace level

Workspace Primary Owners (and any workspace-level Roles Admins) can assign individual members to system roles in workspaces they manage:

1. From your desktop, click your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click Workspace settings.
3. Below Administration, click Roles. If you don’t see this option, click Menu in the top-left corner to find it.
4. Choose a system role, then click Assign Members.
5. Select the members you’d like to assign.
6. Click Assign.

The Org Primary Owner (and any org-level Roles Admins) can assign IDP groups to system roles. They can also decide if members of the IDP groups will be able to manage the entire org or specific workspaces:

1. From your desktop, click your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click Organization settings.
3. Click Settings, then click Roles. 
4. Next to the system role you’d like to assign, click the  three dots icon and select Assign groups.
5. Select IDP groups to assign, then click Next.
6. Choose whether these members will manage the org or specific workspaces, then click Save.

Org level

The Org Primary Owner (and any org-level Roles Admins) can edit and revoke system roles assigned to individuals:

1. From your desktop, click your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click Organization settings.
3. Click Settings, then click Roles. 
4.  Next to the system role you’d like to modify, click the  three dots icon and select View assigned members.
5. Click the  three dots icon next to a member’s name.
6. Click Edit to make changes, or click Revoke role to revoke a role.
7. Click Save or Revoke to confirm the change.

Note: If a role was assigned to a member in an IDP group, you'll only be able to modify the system role for the IDP group.

Workspace level

Workspace Primary Owners (and any workspace-level Roles Admins) can revoke system roles. It’s not possible to edit system roles at the workspace level.

1. From your desktop, click your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click Workspace settings.
3. Below Administration, click Roles. If you don’t see this option, click Menu in the top-left corner to find it.
4. Select a system role then click the View Assigned Members tab.
5. Click the  three dots icon next to a member’s name and select Revoke role.
6. Click Revoke.

The Org Primary Owner (and any org-level Roles Admins) can edit or revoke system roles assigned to IDP groups:

1. From your desktop, click your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click Organization settings.
3. Click Settings, then click Roles. 
4. Next to the system role you’d like to modify, click the  three dots icon and select View assigned groups.
5. Click the  three dots icon next to an IDP group.
6. Click Edit to make changes, or click Revoke role to revoke a role.
7. Click Save or Revoke to confirm the change.