# Managing Personas and Permissions

{% hint style="info" %}
**Best practice: Use external and internal IAM**

Use an [external IAM](https://documentation.immuta.com/2024.3/people/section-contents/reference-guides/identity-managers) for authentication and Immuta's internal IAM to manage attributes.
{% endhint %}

## Create users

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Click the **New User** button.
3. Fill out the **Full Name** and **Email** fields in the dialog. *Note: The user's email address will be used as the username and must be unique.*
4. Click the **Create** button.

## Add permission to user

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to edit and select the **Settings** tab.
3. Click **Add Permissions**.
4. Click the **Select Permission** dropdown, and select the permission you want to give the user.

## Disable users

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to disable, and click the **more actions** icon.
3. Select **Disable User**.
4. Click **Disable** in the confirmation dialog.

## Permanently delete users

**Requirement**: `USER_ADMIN` permission

*Note: This action permanently deletes all data associated with this user from Immuta, including data source subscriptions, and a timestamp of this event will be captured in the audit logs. The ability to create governance reports against this user will no longer be possible. This action cannot be undone.*

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to disable, and click the **more actions** icon.
3. Select **Permanently Delete**.
4. Click **Permanently Delete User** in the confirmation dialog.
5. Type **Delete** to confirm deleting the user permanently.
6. Click the **Confirm Permanent Delete** button.

## Migrate users

**Prerequisite**: [An IAM configured in Immuta](https://documentation.immuta.com/2024.3/people/section-contents)

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Click the **more actions** icon and select **Migrate User**.
3. Enter their username in the modal that appears and click **Migrate User**.

## Remove a permission from a user

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Select the user you want to edit and select the **Settings** tab.
3. Click **Remove** on the permission you want to remove.

## Download metrics

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Click the **Metrics** button.
3. Complete the **Number of Days** field in the dialog that appears, and then click **Download** to download the JSON file.

## Show disabled accounts

Once an account has been disabled, it will not appear in the list of current Immuta users. To show the disabled accounts,

1. Click the **People** icon in the navigation and select the **Users** tab.
2. Use **Filters** to filter the table to **Include Accounts** and check the **Disabled** box.