Review and change a user's access

Global administrators use Admin → Access → Users → [user] → Access to inspect access sources and change supported roles.

Review access before changing it

1. Confirm the selected account by name and email.
2. Open Access → Overview for global roles and access counts.
3. Use Organizations for memberships and Staff-visible Clients.
4. Use People for delegated People and care-team subjects.
5. Use Content for folder grants.
6. Search within the relevant section and use its Previous, Next, or Refresh controls.

Lists are paged separately. The current rows may show only part of the account's current access. Changing a search or sort changes which rows appear.

People and Content are inspection sections here. Manage delegated or care-team access through People, and folder sharing through Library. A folder's effective role and explicit grant can differ because access can be inherited.

Grant or revoke global Admin

In Access → Overview, select Grant admin or Revoke admin. Review the confirmation and confirm the intended account.

Global Admin authority is different from organization Staff or Manager authority. The server rejects self-demotion and removal of the last global administrator. These changes are recorded in Audit.

Add or change organization membership

1. Open Access → Organizations and select Add membership.
2. Use Find organization and the candidate paging controls.
3. Select the exact organization and choose Member or Staff.
4. Select Add membership, or Update role if already assigned.
5. Review the refreshed membership and related access.

An existing editable row also has a Role selector. Reducing Staff to Member asks for confirmation. Other supported role changes can save immediately.

The add/update dialog replaces the membership role; it is not an invitation. Updating an existing membership to Staff through this dialog can clear its Manager status. Use the organization's Staff controls to inspect or set Manager. Owner is not offered as a new role in this selector.

Remove a membership

Select the row's Remove action, review the organization and consequence, then confirm Remove membership.

Demotion or removal can end organization access, Staff-visible Client access, and a qualifying personal Staff License. Separate grants or relationships may still provide access elsewhere.

Removing a Staff-visible Client is a different action: it changes the organization's Client assignment. Follow Client visibility.

Recover from unavailable or stale details

Use Retry or Refresh after a failed read. If details disappear because access changed, reopen the record with the correct administrator account. A successful change followed by a refresh error may already be saved; check the current account before repeating it.