---
title: Work with user roles
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

![](https://docs.kentico.com/docsassets/guides/work-with-roles-essentials/Role-management-icon.png)

## Roles in Xperience

User roles help you define which parts of the administration UI a user should or should not have access to.
This part of the series will walk you through setting up user roles in the **Role management** application and controlling access to different parts of the system, from creating and managing user roles to assigning permissions and adding users to these roles.

## Create a new user role

A group of users will do the same work in your application. You want to create a user role and define which applications these users will have access to, and what actions they can perform. Start by setting up your user roles.

1. In Xperience, go to the **Role management** application and create **New role**.
2. Enter a **Role name**, and **Save** the changes.
3. Switch to the **Permissions** tab and add permissions one by one.

   1. In the drop-down list, select the application you want your user to have access to.
   2. Choose which actions the user can perform.
   3. **Save** your changes.
4. Go to the **Assigned users** tab and select the existing users you want to add to this user role.

   1. To add an entirely new user, you'll need to switch to the **Users** application. See below how you can [add a new user](https://docs.kentico.com/guides/digital-marketing/xperience-essentials/work-with-users-essentials.md) to your system.
5. **Save** the changes.

![](https://docs.kentico.com/docsassets/guides/work-with-roles-essentials/Role-general.png)

## Update permissions

When a user realizes they don't have access to all the applications or actions they need, you need to update their role's _permissions_.

1. Go to the **Role management** application.
2. Select the role you want to change.
3. Switch to the **Permissions** tab and update the permissions.

   1. In the drop-down list, select the application you want your user to have access to and choose which actions the user can perform.
4. **Save** your changes.

![](https://docs.kentico.com/docsassets/guides/work-with-roles-essentials/role-management-permissions.png)

## Update a role

Suppose a digital marketing manager in your company complains that the _Channel Managers_ should not have the right to send an email. The emails must be approved and sent only by the company’s _Email Marketers_. To update the _Digital Channel Manager_ user role, follow the steps below.

 **Task**:

1. Navigate to the **Role management** application.
2. Open the _Digital Channel Manager_ role.
3. Go to the **Permissions** tab on the left.
4. Find the permissions for the **Marketing Emails** channel.
5. Remove the **Send email** permission.
6. **Save** your changes.

## Next step

Continue learning about [working with users](https://docs.kentico.com/guides/digital-marketing/xperience-essentials/work-with-users-essentials.md).