> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ndumed.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage user accounts and roles

> Administrators add NduMed user accounts, assign roles, edit details, send reset links, deactivate and reactivate users, and link accounts to staff records.

Administrators manage who can sign in to NduMed from **Administration** in the menu. Each account has one role, which controls what the person can do. See [Roles and access](https://docs.ndumed.co/getting-started/roles-and-access.md).

## Find a user

The user list shows **Username**, **Name**, **Role** and **Status**. Filter by **Role** and **Status**.

## Add a user

**1. Select Add user**

Enter **Username** (cannot be changed later), **Full name**, **Email** and **Role**.

**2. Select Create user**

NduMed emails the person a **Set up your account** link, valid for 72 hours. They use it to choose their password.

**3. Link the staff record (optional)**

Select **Link staff member** to connect the account to the person's staff record. This sets which clinic their worklists open on by default.

> [!TIP]
>
> Make sure the email address is correct. Without a working email, the person cannot receive their setup or reset links.

## Edit a user

Open the user and change **Full name**, **Email** or **Role**, then select **Save changes**. Changing someone's role signs them out so their new access takes effect.

## Account actions

| Action | What happens |
| - | - |
| **Send a reset link** | Emails a password reset link and signs the user out everywhere. Use when someone is locked out or forgot their password. |
| **Deactivate** | After confirmation, the user can no longer sign in and is signed out. Their records and history stay. |
| **Reactivate** | Lets a deactivated user sign in again. |
| **Change staff member** / **Unlink staff member** | Changes or removes the link to a staff record. |

## Safety rules

* You cannot change your own role, or deactivate or reactivate yourself.
* NduMed will not let you remove the last active administrator.
* Only an administrator can act on another administrator's account.
* A user who is allowed to manage users but is not an administrator can only give roles whose permissions they hold themselves.

## Things you cannot do yet

> [!NOTE]
>
> * **Unlock an account**: a locked account unlocks itself after 15 minutes, or when the user resets their password. Use **Send a reset link** to help.
> * **Reset someone's two-step verification**: contact NduMed support.
> * **Change what each role is allowed to do**: contact NduMed support.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.