# How do I manage Users and Roles?
Account admins can access the User Management features via the Tools menu.
This page shows all users added to the account, displaying first and last names, email, and created date.
* Email address is the only required field, but can't be edited after a user is created
* To add a new user, tap the + icon at the top right
* To delete a user, tap the kabob menu at the top left
* The yellow warning icon indicates that the invitee has not yet changed their password and logged in
Deleting Users
Aiceberg uses AWS Cognito to manage user access. When a user account is deleted, existing session tokens will remain valid for up to one hour due to Cognito's token caching mechanism. This means users may continue to access the application during this period even after their account has been removed.
If you need to revoke user access immediately (for security reasons or other urgent situations), you'll need to handle this through your Single Sign-On (SSO) provider rather than through our application directly.
Permissions & Roles
This feature is in development.
Tap on the Roles tab to see how permissions are set for each role.
Permissions and roles are not yet editable. The table is for information only.
The two available roles are Admin and Developer. Individual permission may allow view or edit access. In general, if a role is not allowed to view or edit a feature, that feature is not shown in the UI. If you need an additional role, please email .
The features currently controlled by permissions are:
* creation of API keys
* see prompt authors besides yourself
* use the prompt Cannon
* see prompt/response content created by other users
* see redacted content in Prompt Details
* see user management page
It's possible to add users without assigning a role; however, they will not be able to see any data in any page.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.aiceberg.ai/tools/how-do-i-manage-users-and-roles.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.