# Users

This topic describes how to create and manage users and roles in Rebilly.

To effectively manage your team and the roles within it, [create roles](#create-roles) before you start adding users.

## Create roles

Use this process to create roles for the members in your team.

To complete this process, you must have the administrator role, or a role with [User permissions](/docs/settings/user-permissions#users).

Roles have a defined set of permissions that are used by a specific user group.
If permissions are added or removed from a role, the permissions list for all users with that role are updated.

1. In the left navigation bar, press .
2. In the **Management** section, press **Users**.
3. In the right of the page, press **Roles**.
4. In the right of the page, press **Create role**.
5. In the **Name** field, enter a name for the role.
6. In the **Description** field, enter a description of the role.
7. In the **Include roles** field, to add the permissions of other roles to the role you are creating, press in the input field and select one or more roles from the dropdown.
8. In the **Permissions** field, enter individual permissions.
For a list of permissions, see [User permissions](/docs/settings/user-permissions). 
Note: When you create a new user, you can also assign custom permissions to the user from role templates that have been created by Rebilly.
For more information, see [Add a new user](#add-a-new-user).
9. Optionally, in the **Allowed IPs** field, enter a list of permitted IP addresses which the role can use to access Rebilly. 
This role inherits IP restrictions from roles that are added using the **Include roles** field. 
Note: To allow access from all IP addresses, leave the **Allowed IPs** field empty.
10. Press **Save role**.


## Add a new user

Use this process to add a new user to your team and to assign permissions to them.

To complete this process, you must have the administrator role, or a role with [User permissions](/docs/settings/user-permissions#users).

1. In the left navigation bar, press .
2. In the **Management** section, press **Users**.
3. In the right of the page, press **Add user**.
4. In the **User details** section, enter the user's details.
5. In the **User permissions** section, select from the following:
Grant administrator permissions to the userSelect **Full access (Administrator)**.
Grant limited access  1. Select **Limited access**.
  2. To apply existing roles to the user, in the **User roles** dropdown, select a predefined role. 
Your predefined roles are displayed in this field.
To create roles, see [Create roles](#create-roles).
  3. Under **Permissions**, select from the following:
    - **Copy from a role template**: Use this option to copy permissions from role templates that have been created by Rebilly. In the **Role template** dropdown, select from the following:
      - **Customer service agent**: Grants permission to access data such as: customers, transactions, and invoices.
      - **Settings manager**: Grants permission to access settings.
      - **Accountant:** Grants permission to access KPIs.
      - **KYC agent**: Grants permission to review, download, approve, or reject KYC documents, and to access tags and custom fields.
    - **Customized for this user**: Use this option to add customized permissions without using a template.
6. Add or remove permissions from the permissions list. 
For a list of permissions, see [User permissions](/docs/settings/user-permissions).
7. Optionally, in the **Allowed IPs** field, enter a list of permitted IP addresses which the user can use to access Rebilly. 
This user will also inherit any IP restrictions that are associated with the role they have been assigned. 
Note: To allow access from all IP addresses, leave the **Allowed IPs** field empty.
8. Press **Save user**.


## View, edit, emulate, or delete users

Use this process to view, edit, emulate, or delete users.

To complete this process, you must have the administrator role, or a role with [User permissions](/docs/settings/user-permissions#users).

1. In the left navigation bar, press .
2. In the **Management** section, press **Users**.
The list of users is displayed.
3. Select from the following:
Edit a user's details or permissions  1. In the list of users, in the **Name** column, press a user.
  2. Edit the user, then press **Save user**.
Verify that a user has activated their accountIn the user list, the status column displays the user's account status.
If the user has not activated their account, a `Pending confirmation` status is displayed.
Resend a user's email inviteOn the right of the user, press **Resend confirmation email**.
Delete a userOn the right of the user, press .
Emulate user permissionsUse this feature to test a user's permissions, and to see which parts of the Rebilly product are available to them.
On the right of the user, press . 
To stop emulating user permissions, at the top of the page, press **Stop emulation**.


## Configure your user profile

Use this process to reset your password, switch between displaying customer names or customer organization names, change time zone, or to set up multi-factor authentication.

1. In the top right corner of the page, press your initials, then press your name.
2. Select from the following:
Reset your passwordIn the **Profile summary** section, press **Reset password**.
Change themeIn the **Theme** section, select **Light**, **Dark**, or **System** to match the theme of your device.
Change data tables report limitIn the **Data tables report limit** section, in the **Results per page** dropdown, select a limit.
Switch between displaying your full name or organization nameIn the **Display name** section, select an option in the dropdown.
Change time zoneIn the **Currency and time zone** section, press **Detect my time zone**.
Or, in the **Select time zone** dropdown, select a time zone.
Change time formatIn the **Currency and time zone** section, in the **Time format** dropdown, select a format.
Set up Multi-Factor Authentication (MFA)In the **Multi Factor Authentication (MFA)** section, press **Set up MFA**, then follow the instructions.


## Multi-Factor Authentication (MFA)

MFA provides additional security during the sign-in process by requiring more than one form of identity verification to authenticate a user.
This involves the use of a smart device (phone, tablet, and so on) and an authentication application, such as Google Authenticator, or Duo Security.
The user is required to use a password and an authentication code from the authentication application.
If a password is compromised, a malicious user would need the related authentication device, and access to the authentication application, to sign in.

Warning
If you enable MFA on your account but do not complete the setup using an authentication application, you will be locked out of your account.
If you cannot access your account, [contact Support](/contact/).

The use of MFA is optional in Rebilly, but highly recommended.
To enable MFA, see [Configure your user profile](#configure-your-user-profile).

## Change the theme

Use this process to change the theme of the Rebilly UI for your user account.
This option switches between light and dark mode.

There are two ways to change the theme. Select from the following:

details
summary
From any page
1. In the top right corner of the page, press your initials.
2. Press **Switch theme to light mode** or **Switch theme to dark mode**.


details
summary
From user profile settings
1. In the top right corner of the page, press your initials, then press your name.
2. In the **Theme** section, select **Light**, **Dark**, or **System** to match the theme of your device.