As a tenant admin, you may need to assign or remove roles for users within your tenancy. To do this:

• Click on Users on the left-hand menu.
  
  
  
  
• Click on the username of the user you wish to edit.
  
  
  
  

• Navigate to the Role Mappings tab:
  
    - To Assign a role, Click on Assign role 
      
       
      
      
        Select the "Filter by Realm Roles" option, or make sure it is already chosen.
  
       
  
  
        Select the desired role from the Roles list, and click Assign. For explanations of EWC roles, please refer to the EUMETSAT EWC IAM - User Roles and Permissions.
  
       
  
  
  

  It is very important to ensure that the roles you assign align with the roles used by your service. For example, if you want a user to have or retain admin privileges in your service (e,g Morpheus), you must assign them the ewc-app-admin role. Failing to do so will prevent the user from having admin access in the service.

  
  
  
   - To Unassign a role, you have two options.
  
      Select one or multiple roles from the list and click on Unassign.
     
     
  
      Or, click on the three dots to the right of the role description and choose Unassign.