# Managing Users and Permissions

## Create users

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users**.
2. Click the **New User** button.
3. Fill out the **Full Name** and **Email** fields in the dialog. *Note: The user's email address will be used as the username and must be unique.*
4. Click the **Create** button.

## Add permission to user

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users**.
2. Select the user you want to edit and select the **Settings** tab.
3. Click **Add Permissions**.
4. Click the **Permission** dropdown, and select the permission you want to give the user.

## Disable users

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users**.
2. Select the user you want to disable, and click the **more actions** icon.
3. Select **Disable User**.
4. Click **Disable** in the confirmation dialog.

## Permanently delete users

**Requirement**: `USER_ADMIN` permission

*Note: This action permanently deletes all data associated with this user from Immuta, including data source subscriptions, and a timestamp of this event will be captured in the audit logs. The ability to create governance reports against this user will no longer be possible. This action cannot be undone.*

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users**.
2. Select the user you want to disable, and click the **more actions** icon.
3. Select **Permanently Delete**.
4. Click **Permanently Delete User** in the confirmation dialog.
5. Type **Delete** to confirm deleting the user permanently.
6. Click the **Confirm Permanent Delete** button.

## Migrate users

**Prerequisite**: [An IAM configured in Immuta](https://documentation.immuta.com/SaaS/configuration/people/section-contents)

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users**.
2. Select the user you want to migrate, and click the **more actions** icon.
3. Select **Migrate User**.
4. Enter their name in the modal that appears and click **Migrate User**.

## Remove a permission from a user

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users**.
2. Select the user you want to edit and select the **Settings** tab.
3. Click **Remove** on the permission you want to remove.

## Download metrics

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users**.
2. Click the **Download Metrics** button.
3. Complete the **Number of Days** field in the dialog that appears, and then click **Download** to download the JSON file.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.immuta.com/SaaS/configuration/people/users-index/how-to-guides/managing-personas-and-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
