# Users

This topic describes how to create and manage users and roles in Rebilly.

To effectively manage your team and the roles within it, [create roles](#create-roles) before you start adding users.

## Create roles

Use this process to create roles for the members in your team.

To complete this process, you must have the administrator role, or a role with [User permissions](/docs/settings/user-permissions#users).

Roles have a defined set of permissions that are used by a specific user group. If permissions are added or removed from a role, the permissions list for all users with that role are updated.

1. In the left navigation bar, press .
2. In the **Management** section, press **Users**.
3. In the right of the screen, press **Roles**.
4. In the right of the screen, press **Create role**.
5. In the **Name** field, enter a name for the role.
6. In the **Description** field, enter a description of the role.
7. In the **Include roles** field, to add the permissions of other roles to the role you are creating, press in the input field and select one or more roles from the dropdown.
8. In the **Permissions** field, enter individual permissions. For a list of permissions, see [User permissions](/docs/settings/user-permissions). 
Note: When you create a new user, you can also assign custom permissions to the user from role templates that have been created by Rebilly. For more information, see [Add a new user](#add-a-new-user).
9. Optionally, in the **Allowed IPs** field, enter a list of permitted IP addresses which the role can use to access Rebilly. 
This role inherits IP restrictions from roles that are added using the **Include roles** field. 
Note: To allow access from all IP addresses, leave the **Allowed IPs** field empty.
10. Press **Save role**.


## Add a new user

Use this process to add a new user to your team and to assign permissions to them.

To complete this process, you must have the administrator role, or a role with [User permissions](/docs/settings/user-permissions#users).

1. In the left navigation bar, press .
2. In the **Management** section, press **Users**.
3. In the right of the screen, press **Add user**.
4. In the **User details** section, enter the user's details.
5. In the **User permissions** section, select from the following:
  - Grant administrator permissions to the user: Select **Full access (Administrator)**.
  - Grant limited access:
    1. Select **Limited access**.
    2. To apply existing roles to the user, in the **User roles** dropdown, select a predefined role. 
Your predefined roles are displayed in this field. To create roles, see [Create roles](#create-roles).
    3. Under **Permissions**, select from the following:
      - **Copy from a role template**: Use this option to copy permissions from role templates that have been created by Rebilly. In the **Role template** dropdown, select from the following:
        - **Customer service agent**: Grants permission to access data such as: customers, transactions, and invoices.
        - **Settings manager**: Grants permission to access settings.
        - **Accountant:** Grants permission to access KPIs.
        - **KYC agent**: Grants permission to review, download, approve, or reject KYC documents, and to access tags and custom fields.
      - **Customized for this user**: Use this option to add customized permissions without using a template.
6. Add or remove permissions from the permissions list. 
For a list of permissions, see [User permissions](/docs/settings/user-permissions).
7. Optionally, in the **Allowed IPs** field, enter a list of permitted IP addresses which the user can use to access Rebilly. 
This user will also inherit any IP restrictions that are associated with the role they have been assigned. 
Note: To allow access from all IP addresses, leave the **Allowed IPs** field empty.
8. Press **Save user**.


## View, edit, emulate, or delete users

Use this process to view, edit, emulate, or delete users.

To complete this process, you must have the administrator role, or a role with [User permissions](/docs/settings/user-permissions#users).

1. In the left navigation bar, press .
2. In the **Management** section, press **Users**. The list of users is displayed.
3. Select from the following:
  - Edit a user's details or permissions:
    1. In the list of users, in the **Name** column, press a user.
    2. Edit the user, then press **Save user**.
  - Verify that a user has activated their account: In the user list, the status column displays the user's account status. If the user has not activated their account a `Pending confirmation` status is displayed.
  - Resend a user's email invite: On the right of the user, press **Resend.**
  - Delete a user: On the right of the user, press .
  - Emulate user permissions: On the right of the user, press . 
Use this feature to test a user's permissions, and to see which parts of the Rebilly product are available to them. To stop emulating user permissions, at the top of the screen, press **Stop emulation**.


## Configure your user profile

Use this process to reset your password, switch between displaying customer names or customer organization names, change reporting currency, change time zone, or to set up multi-factor authentication.

1. In the top right corner of the page, press your initials, then press your name.
2. Select from the following:
  - Reset your password: In the **Profile summary** section, press **Reset password**.
  - Switch between displaying your full name or organization name: In the **Display name** section, select an option in the dropdown.
  - Change reporting currency: In the **Currency and time zone** section, in the **Reporting currency** dropdown, select a currency.
Once reporting currency is set, it cannot be changed.
  - Change time zone: In the **Currency and time zone** section, press **Detect my time zone**. Or, in the **Select time zone** dropdown, select a time zone.
  - Change time format: In the **Currency and time zone** section, in the **Time format** dropdown, select a format.
  - Set up Multi-Factor Authentication (MFA): In the **Multi Factor Authentication (MFA)** section, press **Setup MFA**, then follow the on screen instructions.
  - Deactivate MFA (if MFA is active): In the **Multi-factor authentication** section, press **Deactivate MFA**. 
For more information, see [Multi-Factor authentication (MFA)](#multi-factor-authentication-mfa).


### Multi-Factor authentication (MFA)

Multi-Factor authentication (MFA) provides additional security during the sign-in process by requiring more than one form of identity verification to authenticate a user. This involves the use of a smart device (phone, tablet, and so on) and an authentication application, such as Google Authenticator, or Duo Security. The user is required to use a password and an authentication code from the authentication application. If a password is compromised, a malicious user would need the related authentication device, and access to the authentication application, to sign in.

The use of MFA is optional in Rebilly, but highly recommended.

Warning
If you enable 2FA on your account but do not complete the set up using an authentication application you will be locked out of your account. If you cannot access your account, [contact Support](/contact/).

## Change the theme

Use this process to change the theme of the Rebilly UI for your user account. This option toggles between light and dark mode.

There are two ways to change the theme. Select from the following:

- **From any page:**
  1. In the top right corner of the page, press your initials.
  2. Press **Switch theme to light mode** or **Switch theme to dark mode**.
- **From user profile settings:**
  1. In the top right corner of the page, press your initials, then press your name.
  2. In the **Theme** section, select **Light**, **Dark**, or **System** to match the theme of your device.