> For the complete documentation index, see [llms.txt](https://docs.harmony.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.harmony.io/settings/managing-user-management.md).

# Managing User Management

{% hint style="info" %}
**Path:** `/settings/user-management`
{% endhint %}

### Managing Users and Groups

User and group management is org-level. Open **Settings** → **User Management**.

#### Understanding User Management

User management shows users who have roles (Platform or Desk) and the groups they belong to. Users and groups are synced from your identity provider (IdP). You assign roles and desk access via groups.

Role and group data is kept consistent in real time. Role names, group role assignments, and resource access information are reliably reflected throughout the platform, so what you see in the UI and what the API returns always matches the current state of your configuration.

#### Viewing All Users

1. Go to **Settings** → **User Management** → **Users** tab.
2. The table lists users with roles. Users without roles are hidden.
3. Use search (name/email), filter by role, and pagination to find users.
4. Click a row to open the user detail pane.

![Settings > User Management > Users tab](/files/Chull6POOgbqvPGzhT1M)

#### Viewing User Details

In the user detail pane:

* **Avatar, name, email**
* **Groups** - Groups the user belongs to, with roles (e.g., Platform admin, Desk agent).
* **Desks** - Desks the user has access to, with desk-level roles (Manager, Agent, Observer).

Click a group or desk row to go to its settings.

![User detail pane with Groups and Desks](/files/ZvePWpjnFWH6hf7gZQ7H)

#### Managing User Groups

**Viewing groups**

1. Go to **Settings** → **User Management** → **Groups** tab.
2. The table shows group name, roles, desks count, and members count.
3. Click a row to open the group detail pane.

![Groups tab with Import group button](/files/iSjKVMNCXIYkRmbGprdr)

**Creating user groups**

Groups come from your IdP. Use **Import group** to bring an IdP group into Harmony and assign roles and desks. You do not create groups in Harmony directly.

**Editing group details**

1. Open a group's detail pane.
2. Click **Edit** to open the Import/Edit group modal.
3. Change role assignments (Platform and Desk roles) and desk assignments.
4. Save. This replaces the group's existing role configuration.

**Importing groups**

1. Click **Import group**.
2. Select an IdP group from the dropdown.
3. Assign Platform roles (Platform admin, Platform agent, Platform observer) if needed.
4. Assign Desk roles (Desk manager, Desk agent, Desk observer) and select which desks each role applies to.
5. Save. The group's roles replace any previous assignment.

![Import group modal with IdP dropdown](/files/exHQe0jqEg1277p4lhrz)

**Deleting groups**

Groups are defined in the IdP. To remove a group's access in Harmony, open **Edit** and clear all role and desk assignments, then save. The group remains in the IdP but no longer has Harmony access.

#### Assigning Users to Groups

Users are assigned to groups in your IdP (Okta, Entra, etc.). Harmony reflects IdP membership. To give a user access, add them to a group in the IdP and ensure that group is imported into Harmony with the right roles and desks.

#### Setting User Permissions

Permissions come from roles. Assign users to groups, then assign roles to those groups. See [User Roles and Permissions](https://github.com/harmonyso/public-docs/tree/main/guides/understanding-user-roles-and-permissions/README.md) for role descriptions.

#### Managing User Roles

**Assigning roles**

Assign roles at the group level:

* **Platform roles** - Platform admin, Platform agent, Platform observer (org-wide).
* **Desk roles** - Desk manager, Desk agent, Desk observer (per desk).

When importing or editing a group, select the roles and, for Desk roles, the desks they apply to.

**Understanding role hierarchy**

* **Platform admin** - Full org access.
* **Platform agent** - Broad access across desks.
* **Platform observer** - Read-only org access.
* **Desk manager** - Manages a specific desk.
* **Desk agent** - Works tickets on a specific desk.
* **Desk observer** - Read-only access to a specific desk.

**Understanding role overlap**

When a group has multiple roles that assign the same desk (e.g., Desk manager and Desk agent), the UI may show an overlap warning. Resolve this by simplifying role assignments so each desk has a single role per group, or by splitting into separate groups.

#### Viewing Resource Assignees

You can look up who has access to a specific resource using the dedicated resource assignees endpoint. This gives you a clear, up-to-date view of all users assigned to a given resource, making it easier to audit access and troubleshoot permission issues without having to cross-reference individual user or group records.

***

### Related Resources

<table data-view="cards"><thead><tr><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><strong>Notification Channels</strong></td><td>Set up Slack, Teams, and Email notification destinations</td><td><a href="https://github.com/harmonyso/public-docs/tree/main/guides/managing-notification-channels/README.md">https://github.com/harmonyso/public-docs/tree/main/guides/managing-notification-channels/README.md</a></td></tr><tr><td><strong>User Roles and Permissions</strong></td><td>Role definitions and access levels</td><td><a href="https://github.com/harmonyso/public-docs/tree/main/guides/understanding-user-roles-and-permissions/README.md">https://github.com/harmonyso/public-docs/tree/main/guides/understanding-user-roles-and-permissions/README.md</a></td></tr><tr><td><strong>Service Desks &#x26; Teams</strong></td><td>Desk structure and team configuration</td><td><a href="https://github.com/harmonyso/public-docs/tree/main/guides/managing-service-desks-and-teams/README.md">https://github.com/harmonyso/public-docs/tree/main/guides/managing-service-desks-and-teams/README.md</a></td></tr><tr><td><strong>Understanding Integrations</strong></td><td>Connect Slack, Teams, and notification channels</td><td><a href="https://github.com/harmonyso/public-docs/tree/main/guides/understanding-integrations/README.md">https://github.com/harmonyso/public-docs/tree/main/guides/understanding-integrations/README.md</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.harmony.io/settings/managing-user-management.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.