---
title: Users
slug: manufacturing-connect-edge/users
docTags: 
createdAt: 2024-05-02T13:50:33.400Z
---

The *Users* pane allows you to create and manage user access in Manufacturing Connect Edge. 

# Relationship of Roles, Groups, and Users

Manufacturing Connect Edge incorporates a Role-based access control (RBAC) to customize user permission settings in the form of three distinct components.

- **Roles**: Each role has a collection of customizable permissions. Roles are added to groups and determine the permissions groups have. See [Role Permissions](docId:8Bdd_MizycbThDCesjhb7) for details. 
- **Groups**: A group is made up of one or more roles. The roles in a group determine the permissions for the group. 
- **Users**: Accounts that will be assigned to groups. The one or more groups a user is assigned to determines the roles and permissions the user has.

Working together, a *Role *determines the permission settings a *Group *will have. A *Group *will contain one or more roles that determines its permissions. A *User *will be assigned to a *Group *where it will have access to Manufacturing Connect Edge based on the the Group's one or more *Roles*.

:::hint{type="warning"}
**Important**: The following properties should be kept in mind when adding/editing Roles/Groups/Users.

- A group can receive more than one role (and their respective permission settings) to a resource.
- A user can be assigned to multiple groups.
- If a user is not assigned to at least one group, they will not be able to log in to Manufacturing Connect Edge. 
- In the case of conflicting permission settings: As long as there is at least one role or group with permissions to a resource, regardless of how many other roles/groups that don't have it, users will receive that resource.
:::

::Image[]{src="https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/5kJHdGV18bL1-3UvqROP6_image.png" size="80" width="804" height="322" caption="Visual representation of roles, groups, and users" position="center" showCaption="true"}

# Default Roles, Groups, and Users

By default, the following user management items are provisioned that can't be deleted. 

**Roles**

- Administrator
- Viewer

**Groups**

- Administrators
- Viewers

**User**

- admin

The system ensures that at least one user has the appropriate administrative permissions to manage roles, groups, and users. 

# Default User Permissions

By default, every user has the permission to accept the Manufacturing Connect Edge end-user license (EULA) when logging in the first time. Users can also access their user profile to view their current user permissions and change their password. See [Manage Your User Profile](docId\:c9OGWvHjuHdpsyOhZBeqz) for details. 

Learn more about [Role Permissions](docId:8Bdd_MizycbThDCesjhb7).  

# Backup Files and Templates

All role, group, and user configurations are included in backup files. See [Backup/Restore](docId\:gyhE-k9toTAYBo64qBKLB) and [Backup File Contents and File Management](docId:-gxNWa1EmUWhsKU49n8E6) for more information. 

In template files, only authentication providers are included in template configurations. If you apply a template to a new edge device, you will need to map LDAP groups manually. See [Manage LDAP Providers](docId\:jxjkWJhKdGZ48p3Qf2rYv) for more information. 

# Legacy User Migration

For Manufacturing Connect Edge instances on version 3.2 and earlier, there were three possible roles: Observer, Developer, and Administrator. When you upgrade to version 3.3 or later:

- Any Administrator role is automatically provisioned to the Administrators group with the group's respective permissions. 
- Observer and Developer roles are automatically provisioned to the Viewers group with the group's respective permissions. 

# Access Users UI

:::hint{type="info"}
**Note**: You must have the appropriate permissions to manage roles, groups, and users. By default, the first user (admin user) provisioned in Manufacturing Connect Edge has these user permissions. 
:::

From the Litmus Edge navigation panel, navigate to **System **> **Access Control**. 
The *Users *pane appears. 

![](https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/Ut_3EcpIsK6M_IJv5dxMm_image.png)

# Next Steps

- [Add a Role](docId\:CljNCwpqKWRg1PbGdUg_K) 
- [Manage Roles](docId:3GM47vHAoxrxd578Y5dAL) 
- [Add a Group](docId\:MTp5BxlMPcO40tFtkTKs5) 
- [Manage Groups](docId\:C68OLPGWl1QNcNf__s_pD) 
- [Add a User](docId:5ySYbgEdtk2LWouc79XGK) 
- [Manage Users](docId\:qNlDL_xf1Ashl3UZvfHBa) 
- [Manage Your User Profile](docId\:c9OGWvHjuHdpsyOhZBeqz) 
- [Role Permissions](docId:8Bdd_MizycbThDCesjhb7)