Org level

The org primary owner (and any org-level roles admins) can assign individual members to system roles. They can also decide if the member will be able to manage the entire org or specific workspaces:

1. From your desktop, click on your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click on Organisation settings.
3. Click on Settings, then click on Roles. 
4. Next to the system role that you want to assign, click on the  three dots icon and select Assign members.
5. Select members to assign, then click on Next.
6. Choose whether these members will manage the org or specific workspaces, then click on Save.

Workspace level

Workspace primary owners (and any workspace-level roles admins) can assign individual members to system roles in workspaces that they manage:

1. From your desktop, click on your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click on Workspace settings.
3. Below Administration, click on Roles. If you do not see this option, click on Menu in the top-left corner to find it.
4. Choose a system role, then click on Assign members.
5. Select the members that you want to assign.
6. Click on Assign.

The org primary owner (and any org-level roles admins) can assign IDP groups to system roles. They can also decide if members of the IDP groups will be able to manage the entire org or specific workspaces:

1. From your desktop, click on your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click on Organisation settings.
3. Click on Settings, then click on Roles. 
4. Next to the system role that you want to assign, click on the  three dots icon and select Assign groups.
5. Select IDP groups to assign, then click on Next.
6. Choose whether these members will manage the org or specific workspaces, then click on Save.

Org level

The org primary owner (and any org-level roles admins) can edit and revoke system roles assigned to individuals:

1. From your desktop, click on your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click on Organisation settings.
3. Click on Settings, then click on Roles. 
4.  Next to the system role that you want to modify, click on the  three dots icon and select View assigned members.
5. Click on the  three dots icon next to a member’s name.
6. Click on Edit to make changes, or click on Revoke role to revoke a role.
7. Click on Save or Revoke to confirm the change.

Note: If a role was assigned to a member in an IDP group, you will only be able to modify the system role for the IDP group.

Workspace level

Workspace primary owners (and any workspace-level roles admins) can revoke system roles. It is not possible to edit system roles at the workspace level.

1. From your desktop, click on your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click on Workspace settings.
3. Below Administration, click on Roles. If you do not see this option, click on Menu in the top-left corner to find it.
4. Select a system role, then click on the View assigned members tab.
5. Click on the  three dots icon next to a member’s name and select Revoke role.
6. Click on Revoke.

The org primary owner (and any org-level roles admins) can edit or revoke system roles assigned to IDP groups:

1. From your desktop, click on your workspace name in the top left.
   
2. Select Settings & administration from the menu, then click on Organisation settings.
3. Click on Settings, then click on Roles. 
4. Next to the system role that you want to modify, click on the  three dots icon and select View assigned groups.
5. Click on the  three dots icon next to an IDP group.
6. Click on Edit to make changes, or click on Revoke role to revoke a role.
7. Click on Save or Revoke to confirm the change.