> For the complete documentation index, see [llms.txt](https://docs.material.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.material.security/learn-more/administration/admin-roles/how-to-assign-roles.md).
# How to Assign Roles
{% hint style="danger" %}
When you first onboard onto Material, we'll help you set up a Super Admin. That Super Admin can then enroll other super admins and assign roles.
* We highly recommend you **assign at least two super admins** to cover absences, company departures, etc.
* Avoid assigning super admin to an account that is not part of your corporate domain.
{% endhint %}
Assign your team members roles after their account syncs during your initial deployment (see [1: Connect & Sync](/getting-started/deployment-guides/your-first-30-days/1-connect-and-sync.md)).
{% hint style="warning" %}
If you just connected your email tenants, you may need to wait at least 30 minutes to see accounts synced.
{% endhint %}
Assign a role to an individual account
1. From the left navigation, expand **Explorer** then click **Accounts**.
2. Click an **account** row to reveal the bottom toolbar:
3. From the bottom toolbar, click **Edit Roles**.
4. Check the **role(s)** you want to assign to this account. Note, tenant roles can only be assigned to one tenant. If a user needs those permissions on multiple tenants, then consider a Global role. See [Role Types](#h-role-descriptions) for more information.
5. Click **Save**.
You can also assign Admin permissions to an entire group, then add accounts to the group to inherit those roles.
Assign a role to a group
1. From the left navigation, expand **Explorer** then click **Groups**.
2. Click a **group** row to reveal the bottom toolbar.
3. From the bottom toolbar, click **Edit Roles**.
4. Check the **role(s)** you want to assign to this group. Note, tenant roles can only be assigned to one tenant. If a user needs those permissions on multiple tenants then consider a Global role. See [Role Types](#h-role-descriptions) for more information.
5. Click **Save**.
{% hint style="warning" %}
**Tenant Role + Global Role = Global permissions**
If an account has *both* a Global role and any Tenant role(s), tenant-level permissions are elevated to a global scope, effectively giving the user global access on that account.
Group roles supersede account roles. If an account is part of a group with a Global role, even if their account is only assigned tenant roles, the same logic applies and that account has global access for any permissions in the roles it is assigned.
[Learn more here.](https://docs.material.security/learn-more/administration/admin-roles/pages/6MBgSXCT0ViAaChZeq8h#tenant-roles-vs.-global-roles)
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.material.security/learn-more/administration/admin-roles/how-to-assign-roles.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.