# Manage User Access The Roles tab lets you view and manage the permissions that are available to a single user account. Users are granted permissions based on the roles that they are assigned in one or more projects. You can also grant users access to a project by adding them directly to the project team. For more information, see [Add People to the Project Team](manage-project-access.html#add-users-to-project-team). > **Note: Working with an External Hub Service** > In YouTrack installations that are connected to an external Hub service, personal information and access rights for YouTrack user accounts are managed directly in Hub. The YouTrack profile contains a link to the Hub account which you can use to update personal information and manage logins for the YouTrack user account. > > > > To learn how to manage access rights for a user account in Hub, please refer to the [Hub documentation](https://www.jetbrains.com/help/hub/Configuring-Access-for-a-User-Account.html). ## View Access Permissions The access permissions for a user account are displayed on the Roles tab of the account profile. Here, you can view which roles and permissions are assigned to the account. * The list displays each role assigned to the user and the name of the projects or organizations where the user is granted this level of access. A Global role is granted at the system level and applies across all projects. * The sidebar displays the set of permissions that are assigned to the selected role. Role assignments are grouped by how access is granted. * Direct roles are assigned directly to the user for a specific project. These roles are granted individually and are not inherited through team or group membership. * Team roles are received through membership in a project team. * Registered Users roles are assigned to the user as a registered user in the system. These roles usually provide basic permissions and are typically granted with a global scope. * Group roles are inherited through membership in a group. These roles may apply to specific projects or globally, depending on the scope of the permissions assigned to the role. ![The list of roles assigned to a specific user account.](https://resources.jetbrains.com/help/img/youtrack/2026.2/roles-tab-user.png) > **Note: Viewing Access Permissions for Multiple Users** > If you want to see which users have a specific role applied to their account, you can locate this information by filtering the list of users. To learn how to filter the list of users, see [Search for Users](search-users.html). Procedure: To view the access rights for a user account: > **Tip:** > Requires permissions: Low-level Admin Read (for permissions with global scopes) Read Organization + Read Project Full or Update Organization (for permissions with organization scopes) Read Project Full (for permissions with project scopes) 1. From the main navigation menu, select ![](https://resources.jetbrains.com/help/img/youtrack/2026.2/settings.svg) `Administration > Access Management > Users`. 2. Open a user profile. 3. Open the Roles tab of the account profile. 4. Use the search box to filter the list by permission, role, or scope to find out if the account has the required access to a resource or operation. ![The list of roles assigned to a user account, filtered by a specific permission.](https://resources.jetbrains.com/help/img/youtrack/2026.2/user-roles-filtered.png) ## Grant a Role to a User Account If you do not want to assign a role to all members of a group, you can assign the role to a user account directly. > **Note: Roles with Mixed Permission Scopes** > YouTrack separates role definition from role assignment. While you can create roles with mixed scopes, the system only activates permissions compatible with the specific level where the role is assigned. > > > > * If you assign a role with mixed permission scopes at the global level, all permissions are considered as valid. > > * If assigned at the organization level, globally scoped permissions are disregarded and have no effect. > > * At the project level, permissions with global and organizational scopes are disregarded. YouTrack blocks the assignment of roles unless they contain at least one project-scoped permission. Procedure: To assign a role to a user directly: > **Tip:** > Requires permissions: Low-level Admin Write (for roles with global scopes) Update Organization (for roles with organization scopes) Update Project (for roles with project scopes) 1. From the main navigation menu, select ![](https://resources.jetbrains.com/help/img/youtrack/2026.2/settings.svg) `Administration > Access Management > Users`. 2. Use the search box to find the desired user account. 3. Select a user from the list. 4. Select the Roles tab. 5. Click the Assign role button. 6. In the Assign Role dialog, choose a role to assign to the user. 7. Select one or more organizations or projects where you want to assign the role. ![The dialog for assigning a role directly to a user account.](https://resources.jetbrains.com/help/img/youtrack/2026.2/user-grant-role-dialog.png) 8. Click the Confirm button. ## Revoke a Role from a User If a user no longer requires access granted by a role, you can revoke the role assignment. This procedure only applies to roles that are assigned directly to a user. * If a role is granted to a user as a member of a group, you can revoke the role assignment by removing the user from the group. For more information, see [Remove a User from a Group](configure-group-membership-for-an-account.html#remove-user-from-group). * If a role is granted to a user as a member of a project team, you can revoke the role assignment by removing the user from the project team. For more information, see [Remove People from the Project Team](manage-project-access.html#remove-users-from-project-team). Procedure: To revoke a role from a user: > **Tip:** > Requires permissions: Low-level Admin Write (for roles with global scopes) Update Organization (for roles with organization scopes) Update Project (for roles with project scopes) 1. From the main navigation menu, select ![](https://resources.jetbrains.com/help/img/youtrack/2026.2/settings.svg) `Administration > Access Management > Users`. 2. Use the search box to find the desired user account. 3. Select a user from the list. 4. Select the Roles tab. 5. Locate the role assignment that you want to remove from the selected user account. Use the search box to locate a role by permission, role, or scope. 6. Select the role you want to revoke. ![The confirmation dialog shown when revoking a role from a user account.](https://resources.jetbrains.com/help/img/youtrack/2026.2/revoke-role-user.png) 7. Click the Revoke role button. 8. Confirm the action in the confirmation dialog. * The role is revoked from the user in the selected organization or project. * The user loses the permissions that are assigned to the role in the organization or project.