# User Access Management
> ⚠️ **Important** To view User Management-related audit logs, the **Entity Name must be set to `"access"`** in the filter.
>
> Without this filter, user creation, role changes, and access updates will not be visible.
### **Navigate to Account Settings**
* From the left sidebar, click **Settings**
* Select **Account**
* Click on the **“Team Members”** tab at the top of the page
#### 1. Create and Invite a New User
* Click "Invite Team Member"
* Enter user details:
* **Email** – User’s email address
* **First Name** – User’s first name
* **Last Name** – User’s last name
* Select a **Role** i.e. **EDITOR**, **ADMIN** from the list
👉 Role determines what the user can/cannot do:
**ADMIN Role**
Users assigned as **Admin** will have full access, including:
* ✅ May invite team members
* ✅ May change roles
* ✅ May assign privileges
* ✅ May edit own email settings
👉 Typically used for system owners or key administrators
**EDITOR Role**
* ❌ Cannot invite team members
* ❌ Cannot change roles
* ❌ Cannot assign privileges
* ✅ Can edit own email settings
**Assign Privileges**
* Select access to modules (if applicable):
* Forms, Rules, Stories
* Responses, Sources
* Users, Inbox
* Broadcasts, Integrations
* Settings
👉 Note: ADMIN will have all the privileges by default
* Click **Invite** to send user an invitation email (see below)
* Click the link on "Step 1" and you will see below page to set your login password
* Click the link on "Step 2" and you will see below that you have accepted the invitation to access the Bot
* Click on "Show me my bots" to see your chatbots on the BotDistrikt Platform
* Go left panel "Settings" > "Audit Logs" - an audit entry is added when invitation has been sent out i.e. "Action" column = "INVITED" and "Entity Name" column = "access", hover to see the JSON details - green color; record added
#### Check Whether User Have Accepted the Invitation
New user has 24 hours to accept the email invitation, you can see the list of users who have not accepted the invitation with below:
* On the left panel, click **Settings > Account**
* Click on the **“Team Members”** tab at the top of the page
* If the user has not accepted the Invitation, you will see Status column value ie. "Pending"
If the user has accepted the Invitation, you will see Status column value ie. "Accepted"
* Go left panel "Settings" > "Audit Logs" - an audit entry is added when invitation has been accepted i.e. "Action" column = "ACCEPTED" and "Entity Name" column = "access"
#### Update Existing User
* Click on Name to open the user record
* Make the necessary changes e.g. Role, Privileges and click **Save**
* You will see the "Saved successfully" green notification message at the right bottom of the page
* Go left panel "Settings" > "Audit Logs" - a new audit entry is made when changes is sent out i.e. "Action" column = "UPDATED" and "Entity Name" column = "access", hover to see the JSON details - **Red Strikethrough** (Old) and **Green Highlight** (New).
#### Delete (Revoke) User
You can delete or revoke a user access to the Bot with 2 methods:
**METHOD 1 - Delete button**
1. On the left panel, click **Settings > Account**
2. Click on the **“Team Members”** tab at the top of the page
3. To remove an user, click the **trash icon** 🗑️ on the right side of the user row
**METHOD 2 - Revoke button**
1. On the left panel, click **Settings > Account**
2. Click on the **“Team Members”** tab at the top of the page
3. Click on Name to open the user record
4. Click on the Revoke button at the bottom of the screen to delete the user / revoke the acess to the Bot
* A confirmation dialog box will appear to revoke the access to this bot, click "OK"
* A green notification message will appear at the bottom right of the page to confirm that the user's acess has been revoked
* Go left panel "Settings" > "Audit Logs" - a new audit entry is made when changes is sent out i.e. "Action" column = "DELETED" and "Entity Name" column = "access", hover to see the JSON details - All fields are highlighted in **Red with a Strikethrough**.
