> ## Documentation Index
> Fetch the complete documentation index at: https://docs.activeviam.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to manage organization users

> Organization account administration through the Risk Portal Admin console, with new-user creation, role changes, and reversible activation controls, plus separate verification of setup and resource access

Applies to **Admin** with the **Users** list and selected-user account controls.

The Admin console creates organization accounts and manages account roles and activation.
Portfolio, report, and market-data permissions are configured separately.
These procedures require an account authorized to administer the organization.

## What is required before creating a user?

* The intended first name, last name, and email address.
* An approved [user type](./user-permissions#what-do-account-roles-mean).
* An email domain allowed for the organization.
* The intended portfolio, report, and market-data access plan.

The email domain must match the creator's domain or an additional allowed organization domain.
This console's creation flow does not provision an external identity-provider directory.
For existing accounts or externally managed identities, confirm the supported process with the administrator.

<Warning>
  Administrator roles allow changes to other users' access.
  Confirm the required role before creating an account or changing **User Type**.
</Warning>

## How to create an organization user

1. Open **Admin**.
2. Select **Create User**. The **Create New User** dialog opens.
3. Select the required **User Type**.
4. Enter **First Name**.
5. Enter **Last Name**.
6. Enter **Email Address**.
7. Select **Create**.

Verify **User Successfully Created.** and the new account under **Active** in **Users**.
Check the refreshed account's name, email, and role group.
If an error occurs, inspect the account list before retrying creation.

The creation flow requests a password-setup email.
The recipient must receive the message and complete the setup process.
A successful creation message does not confirm email delivery or successful sign-in.
See [Sign in](../user-guide/login-and-start/login) for account access.

Creation alone does not assign specific portfolios, books, reports, or custom environments.
Review the [permission controls](./user-permissions) after creating the account.

## How to change a user type

The target must be another active account in the same organization.
The requested role cannot exceed the acting administrator's permitted role level.

1. Open **Admin**.
2. Select **Active** in **Users**.
3. Select the intended account's name and email row.
4. Check the selected-user summary.
5. Open **User Type** in that summary.
6. Select the intended role.
7. Select **Save** in **Change User's Type**.

Verify **User type successfully updated.** and the refreshed role group.
Role labels can differ between the creation dialog, summary, and change menu.
Check the affected account's behavior after its authentication state refreshes.
Do not assume an existing signed-in session changes immediately.

## How to deactivate an account

Deactivation is available for another account in the same organization.
The target's role must not exceed the acting administrator's role level.

<Warning>
  Deactivation changes account availability.
  Confirm the selected identity before continuing.
  It does not delete the account or remove its stored permission grants.
</Warning>

1. Open **Admin**.
2. Select **Active** in **Users**.
3. Select the intended account.
4. Check the name and email in the summary.
5. Select **Deactivate User** under **Account Status**.
6. Select **Confirm** in **Deactivate User**.

Verify **User successfully deactivated.** and the account under **Deactivated**.
The access workspace is disabled for a deactivated account.
Deactivation does not establish immediate termination of every existing session or external-provider session.
Confirm any required offboarding controls with the administrator.

## How to reactivate an account

1. Open **Admin**.
2. Select **Deactivated** in **Users**.
3. Select the intended account.
4. Check the name and email in the summary.
5. Select **Re-activate User** under **Account Status**.
6. Select **Confirm** in **Activate User**.

Verify **User successfully activated.** and the account under **Active**.
Review the account's existing resource permissions before use resumes.
Reactivation does not reset the password.

## What can prevent a change?

| Observation | Next step |
| - | - |
| **Admin** is unavailable. | Check administrative access with the organization administrator. |
| The email domain is rejected. | Confirm the organization's permitted domains. |
| The email is already registered. | Confirm the supported existing-account process before proceeding. |
| A user-type change is rejected. | Check the acting role, target account, and same-organization requirement. |
| The target is the signed-in account. | Use another authorized administrator for supported account-administration changes. |
| **Active** is displayed but sign-in is incomplete. | Check password setup separately; activation does not prove completion of registration. |

For data and reporting access, continue with [User permissions](./user-permissions).