---
title: "Manage users in IAM"
description: "Add users to your TIR account, follow their invitations, and change or remove their access on the IAM page."
content_type: "how-to"
product: "tir-iam"
platform: "TIR"
url: "/tir/tir-iam/how-to/manage-users-in-the-iam-panel/"
topic: ["users-and-access"]
---

# Manage users in IAM

The **Identity & Access Management (IAM)** page lists everyone who uses your TIR account. Invite people from it, choose their role and
projects, change their access as their work changes, and remove them when they leave.

## Before you begin

You need to be the Owner, an Admin, a Project Manager, or a Project Lead. Each of these roles can
invite people. Only the Owner and Admins can change or remove a person on this page.

## Open the IAM page

Open the account menu at the top right, the button that shows your name and email, and select
**Identity & Access Management (IAM)**. The **Active users** tab lists the people who accepted their
invitation, and the **Invited users** tab lists every invitation with its status.

<a id="add-user"></a>

## Add a user

You can give a person a role below your own:

| Your role       | Roles you can give                       |
| --------------- | ---------------------------------------- |
| Owner           | Admin, or a User with any project role   |
| Admin           | A User with any project role             |
| Project Manager | A User who is a Project Lead or a Member |
| Project Lead    | A User who is a Member                   |

1. Select **Add user**.
2. In **User email**, enter the person's email address.
3. Under **Account role**, choose **ADMIN** for someone who runs every project with you, or **USER** for
   everyone else. An Admin reaches every project, so the form asks for projects only for a **USER**.
4. For a **USER**, tick each project under **Projects** and choose a role in it under **Project role**: **PROJECT
   MANAGER**, **PROJECT LEAD**, or **MEMBER**. For **MEMBER**, choose one or more policies under **Project
   policies**. To make a policy first, see [Create a policy](/tir/tir-iam/how-to/manage-project-members-and-policies/#create-a-policy).
   The form also has a link that opens **Create policy** for that project.
   Use **Search projects** to find a project in a long list. A project you leave unticked stays out of the
   person's access.
5. Select **Add user**.

The person is listed under **Invited users** as **Pending**, and an invitation email goes to them.
To compare the roles before you choose, see [Roles and permissions](/tir/tir-iam/concepts/roles-and-permissions/).

## What the invited person does

A person who is new to E2E:

1. Selects the link in the email and completes the registration form.
2. Signs in and switches to TIR by selecting **TIR-AI Platform** at the top of the dashboard.
3. Opens the account menu at the top right, selects **Show my invitations**, and selects **Accept** in the **Invitations** panel.

A person who already has an E2E account skips the registration and accepts the invitation under
**Show my invitations** in the account menu. Your account then appears under **Switch account** in that menu, and a new account number for your account appears in their MyAccount.

When they accept, they move to **Active users**.

## Send an invitation again

When a person has yet to accept, or the invitation shows **Expired**:

1. On **Invited users**, find the person.
2. In **Actions**, select **Resend invitation**, then **Resend invitation** again in the dialog.

A new link goes to them, and the status is **Pending** again. To withdraw an invitation instead, select
**Delete invitation**, type the person's email in **Confirm deletion**, and select **Delete invitation**.

## Change a person's access

1. On **Active users**, select **Update access** in the person's **Actions**.
2. Change their role or their projects, then select **Update user access**.

**Update access** appears on people whose role is below yours. To change only one project's members,
a Project Manager or Project Lead uses the project's **Project Members** tab; see
[Manage project members and policies](/tir/tir-iam/how-to/manage-project-members-and-policies/).

## Remove a person

Removing a person ends their access to every project in your account.

1. On **Active users**, select **Delete user** in the person's **Actions**.
2. In **Confirm deletion**, type the person's name, or their email when the list shows no name, and select
   **Delete user**.

The person and all their permissions are removed from TIR, and their MyAccount access stays as it is. SSH
keys they attached to your resources stay on those resources, so remove the keys from each resource too.

## What to do next

To see who did what in the account, [view Audit Logs](/tir/tir-iam/how-to/view-audit-logs/). If an invited
person sees **Access Restricted** or a message when you add them, see
[Troubleshooting TIR Access Control](/tir/tir-iam/troubleshooting/tir-iam/).