# Managing Personas and Permissions

{% hint style="info" %}
**Best practice: Use external and internal IAM**

Use an [external IAM](/2024.3/people/section-contents/reference-guides/identity-managers.md) for authentication and Immuta's internal IAM to manage attributes.
{% endhint %}

## Create users

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Click the **New User** button.
3. Fill out the **Full Name** and **Email** fields in the dialog. *Note: The user's email address will be used as the username and must be unique.*
4. Click the **Create** button.

## Add permission to user

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to edit and select the **Settings** tab.
3. Click **Add Permissions**.
4. Click the **Select Permission** dropdown, and select the permission you want to give the user.

## Disable users

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to disable, and click the **more actions** icon.
3. Select **Disable User**.
4. Click **Disable** in the confirmation dialog.

## Permanently delete users

**Requirement**: `USER_ADMIN` permission

*Note: This action permanently deletes all data associated with this user from Immuta, including data source subscriptions, and a timestamp of this event will be captured in the audit logs. The ability to create governance reports against this user will no longer be possible. This action cannot be undone.*

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to disable, and click the **more actions** icon.
3. Select **Permanently Delete**.
4. Click **Permanently Delete User** in the confirmation dialog.
5. Type **Delete** to confirm deleting the user permanently.
6. Click the **Confirm Permanent Delete** button.

## Migrate users

**Prerequisite**: [An IAM configured in Immuta](/2024.3/people/section-contents.md)

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Click the **more actions** icon and select **Migrate User**.
3. Enter their username in the modal that appears and click **Migrate User**.

## Remove a permission from a user

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to edit and select the **Settings** tab.
3. Click **Remove** on the permission you want to remove.

## Download metrics

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Click the **Metrics** button.
3. Complete the **Number of Days** field in the dialog that appears, and then click **Download** to download the JSON file.

## Show disabled accounts

Once an account has been disabled, it will not appear in the list of current Immuta users. To show the disabled accounts,

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Use **Filters** to filter the table to **Include Accounts** and check the **Disabled** box.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.immuta.com/2024.3/people/immuta-users/how-to-guides/managing-personas-and-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.