# Users

> Assign roles to your institution's Unifuse users, see who is active, and sign someone out of every session.

Source: https://docs.unifuse.ai/administration/users/

The **Users** tab lists everyone at your institution with a Unifuse account.

## Before you start

- You need the *manage users* permission.
- Open **Administration → Users**.

## Columns

| Column | Meaning |
|---|---|
| User | Name and email, as provided by the identity provider or SCIM. |
| Role | A drop-down of the institution's roles, plus *(no role)*. |
| Active | Whether the account can sign in. Read-only here. |
| Sessions | **Sign out** (not shown on your own row). |

## Assign a role

Choose a role in the **Role** drop-down. The change applies immediately and is recorded in
the audit log. You cannot change your own role, and you cannot assign a role that holds
permissions you do not have yourself.

## Sign someone out

**Sign out** opens a confirmation showing how many sessions the person has. **Sign out
everywhere** ends all of them. The person can sign in again straight away unless their
account has been deactivated, so to remove access, deactivate them at the identity provider
or through SCIM as well.

## Adding and removing people

There is no invite or deactivate button. Accounts are created the first time a person signs
in through single sign-on, or by SCIM provisioning. Accounts are deactivated by SCIM, which
also ends their sessions. See [SCIM provisioning](/administration/scim-provisioning/).

## Related

- [Roles](/administration/roles/)
- [Session policy](/administration/session-policy/)