> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neuralfactory.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Users & Roles

> Understand user roles and permissions in Neural Factory.

# Users & Roles

Every person in a Neural Factory organization has a **role** that determines what they can do on the platform. Roles control access to administrative features while all users can chat with agents they have access to.

## Role types

| Role       | Description                                                                                                                        |
| ---------- | ---------------------------------------------------------------------------------------------------------------------------------- |
| **Admin**  | Full access to all platform features including agent configuration, knowledge base management, user administration, and analytics. |
| **Member** | Can chat with agents and view their own conversation history. Cannot access administrative features.                               |

## Permissions by role

| Feature                | Admin | Member                           |
| ---------------------- | ----- | -------------------------------- |
| Chat with agents       | Yes   | Yes (agents they have access to) |
| View chat history      | Yes   | Own conversations only           |
| Create/edit agents     | Yes   | No                               |
| Manage knowledge bases | Yes   | No                               |
| Configure toolkits     | Yes   | No                               |
| Manage users & groups  | Yes   | No                               |
| View analytics         | Yes   | No                               |
| Manage API keys        | Yes   | No                               |
| Manage billing (SaaS)  | Yes   | No                               |

## How roles are assigned

* **Enterprise**: Roles are mapped from Azure AD groups or directory roles during sync. Your IT administrator configures which AD groups correspond to Admin or Member roles.
* **SaaS**: The organization creator is automatically an Admin. Additional users receive roles when invited — an Admin can promote or demote users from the User Management page.

## Managing users

Administrators can manage users from the **User Management** section in the sidebar. See [User Management](/user-guide/admin/user-management) for details on inviting users, changing roles, and removing accounts.