---
title: Configuring user roles and access for existing users
summary: null
url: >-
  https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/configuring-user-roles-and-access-for-existing-users
---

Fastly lets superusers change the role, service access, and workspace access for any existing user on your company account. This guide covers how to modify those assignments after a user has been invited.

## Before you begin

Before you begin changing role assignments, keep in mind the following:

- **Use Okta when user management is automated.** If you [automate user management](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/automating-user-management-for-accounts) with Okta, we strongly recommend user management happen in the Okta application, not in the Fastly control panel. Updates in the Okta application will be automatically reflected in the Fastly control panel, but the reverse is not true.
- **Some roles cannot be combined.** The Superuser role cannot be combined with any other role except a [Security (Next-Gen WAF) role](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/about-user-roles-and-permissions#security-next-gen-waf-roles) because it already has full access to everything. For other roles, you'll only see roles that can be combined with your current selections when assigning them. Review our guide on user [roles and permissions](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/about-user-roles-and-permissions) for details.

## Changing roles and access for a user

To change roles and access permissions for an existing user:

1.   Log in to the [Fastly control panel](https://manage.fastly.com).

2.   Go to **Account** > [**User management**](https://manage.fastly.com/account/users).

3. In the **Active users** area, click the **Options** menu next to a user name and then select **Access controls**.
4. _(Optional)_ Select or deselect the **Bypass SSO** box to allow this superuser to log in with a username and password even when SSO sign-on is enabled.
5. In the **Roles** area, review the existing roles assigned to this user. The access permissions for these assigned roles appear in the Access permissions area to the right of the user information.
6. _(Optional)_ From the **Add another role** menu, select an additional role for this user. You'll only see roles that can be combined with the roles already assigned. Keep in mind that adding the Superuser role to existing roles is redundant. You should remove other roles first if assigning the Superuser role.
7. Click **Next**.
8. _(Optional)_ Use the services selection controls in the Services area to grant or [limit access to selected services](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/about-user-roles-and-permissions#service-access-permissions) for this user. If you cannot select this control, another role assigned to this user already provides access to those services.
9. _(Optional)_ Use the workspaces selection controls in the Workspaces area to grant or [limit access to selected workspaces](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/about-user-roles-and-permissions#service-access-permissions) for this user.
10. Click **Save**. The user's roles and permission levels will be changed accordingly.

> **HINT:** Use the search box to search for a specific service or workspace. Click **Grant access to all** or **Revoke access to all** to enable or disable access to all services or workspaces at once.

## Related content

- [Inviting and removing users](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/inviting-and-removing-users)
- [About user roles and permissions](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/about-user-roles-and-permissions)
- [User API documentation](https://www.fastly.com/documentation/reference/api/account/user/)