# Manage users
> Each member of your organization can have their own user profile from which they can use the Campaign Manager.
> For the complete documentation index, see [llms.txt](https://docs.talon.one/llms.txt).
You can manage users, assign them [roles](/docs/product/account/account-settings/manage-roles.md)
to determine what they have access to, and add them to [campaign access groups](/docs/product/account/account-settings/manage-campaign-groups.md).
## Invite a user
:::tip
Before you invite users, we recommend [creating roles](/docs/product/account/account-settings/manage-roles.md#create-a-role)
that you can assign to them from the start.
:::
In the Campaign Manager, you create a new user by inviting them. To invite a user:
1. In the lower-left corner of the Campaign Manager, click **Account**.
1. Click **Organization** > **Users and Roles**.
1. On the right side of the **Users** section, click **Invite User**. An invitation form
appears.
1. In **Email**, enter the email address of the user you are inviting.
1. In **Name**, enter the user's name.
:::note
Users can [change their name](#edit-a-user-profile) after accepting the invitation.
:::
1. Choose whether the user should have **Admin** access, or click **Other** to assign them a
role. See [Manage roles](/docs/product/account/account-settings/manage-roles.md)
for more information.
:::note
If you have not created roles yet, you can invite a user without assigning them one.
However, the user has no permissions or access to any Application until they are
assigned a role.
:::
1. Click **Invite User**.
The invited user receives an email with an invitation link from Talon.One to complete the
creation of their user profile.
:::tip
The invitation link expires 24 hours after the email is sent. If the link is expired but
the user hasn't created their user profile yet, in the [_Users_ section](#display-users),
click next to the name of the invited user, then click
**Resend Invitation** to send a new email.
:::
:::note
If you have [single sign-on](/docs/product/account/account-settings/set-up-sso.md)
enabled for your organization, you can also invite users programmatically using the
[Invite user from identity provider](/management-api#tag/Accounts-and-users/operation/inviteUserExternal)
endpoint.
:::
## Display users
In **Account** > **Organization** >
**Users and Roles**, the **Users** section displays the users in your account.
It contains the following information for each user:
| Column | Description |
| ----------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name | Name of the user. |
| Email | Email address of the user. |
| Status | Status of the user. Indicates whether the user is , , or . |
| Roles | Roles assigned to the user. |
| Campaign access groups | Campaign access groups the user is added to. |
| Created | Date and time when the user profile was created. |
| Updated | Date and time when the user profile was last updated. |
| Last sign-in | Date and time when the user last signed in to Talon.One. |
| Last activity | Date and time of the user's last activity after signing in to Talon.One. |
| Actions | Clickable icon that allows you to assign roles to the user, add the user to campaign access groups, disable the user profile, and delete the user profile. |
:::tip
Click next to the name of a user to see role and
campaign access group details.
:::
## Edit a user profile
In **Profile** > **Profile**, each
user can edit the following information about their own user profile:
- On the **Profile Details** page, their name.
- In the **Profile information** section, their privacy settings.
- In the **Sign-in information** section, their password, if **Sign-in type** is **Email**.
- To change the current account password, click **Change Password**.
- To recover a lost or forgotten password, click **Recover Password**.
:::tip
We recommend using a password that is complex and unique to your Talon.One sign-in.
:::
- On the **Email Notifications** page,
the [Applications for which they want to receive email notifications](/docs/product/get-started.md#enable-email-notifications).
## Disable a user
You can disable a user to remove their access to all Applications in your deployment.
When you disable a user, any
[Management API keys](/docs/product/account/dev-tools/manage-mapi-keys) created by that
user can no longer be used. These keys are automatically restored if you reactivate the
user. Everything else they created, such as campaigns or attributes, remains unaffected.
To disable a user:
1. In the lower-left corner of the Campaign Manager, click **Account**.
1. Click **Organization** > **Users and Roles**.
1. In **Users**, to the right of the user you want to disable, click > **Disable User**.
The user becomes immediately
and cannot sign in to the Campaign Manager anymore.
:::note
- To reactivate the user, follow the same steps and click **Enable User**.
- You can also disable and reactivate users programmatically using the
[Update user](/management-api#tag/Accounts-and-users/operation/updateUser),
[Disable user by email address](/management-api#tag/Accounts-and-users/operation/deactivateUserByEmail),
and
[Enable user by email address](/management-api#tag/Accounts-and-users/operation/activateUserByEmail)
endpoints.
:::
## Delete a user
You can delete a user to remove all their access to your deployment, or to reduce the
number of profiles when you reach your plan's limit.
When you delete a user, any [Management API keys](/docs/product/account/dev-tools/manage-mapi-keys.md)
created by that user can no longer be used. Everything else they have created, such
as campaigns or attributes, remains unaffected.
:::important
This action cannot be undone. If you only want to remove a user's access, consider
[disabling the user](#disable-a-user) instead.
:::
To delete a user:
1. In the lower-left corner of the Campaign Manager, click **Account**.
1. Click **Organization** > **Users and Roles**.
1. In **Users**, to the right of the user you want to disable, click > **Delete User**.
The user is immediately deleted and cannot sign in to the Campaign Manager anymore.
:::note
You can also delete users programmatically using the [Delete user](/management-api#tag/Accounts-and-users/operation/deleteUser)
and [Delete user by email address](/management-api#tag/Accounts-and-users/operation/deleteUserByEmail)
endpoints.
:::
## Related pages
- [Manage roles](/docs/product/account/account-settings/manage-roles.md)
- [Manage campaign access groups](/docs/product/account/account-settings/manage-campaign-groups.md)
- [Application overview](/docs/product/applications/overview.md)