# User & Role Management

## Login Methods

The login window offers three authentication methods:

<img src="/files/tAWB3ptBgVCNaJFyvvOq" alt="" data-size="line">  **Azure AD:** Access the platform using Azure Active Directory credentials.

<img src="/files/OwNgrHPXIgDkdJpqDD5a" alt="" data-size="line">  **User Pass:** Authenticate using unique user-password combination.

<img src="/files/JEfQvFL7OWta5NRfuvpI" alt="" data-size="line">  **Mobile ID:** Use mobile number for secure and convenient access.

<figure><img src="/files/rlFpwFj1YlnZk1ErbwBA" alt=""><figcaption><p>DataCentral Authentication</p></figcaption></figure>

***

## Create Users

Admins have the option to create users under three available categories

<img src="/files/npzbNnvdFd3tNx6njdon" alt="" data-size="line">  **Azure AD:**  Users added directly from your Azure Active Directory, enabling integration and access within the tenant. These users can bring their Power BI Pro license for embedding.\
\ <img src="/files/YRqjGACCFv4AHGMFSjR7" alt="" data-size="line"> **External AAD:** Users will be added to your Azure Active Directory as guests with their invitation status marked as 'Pending Acceptance'. Can bring their Power BI Pro license for embedding.

<img src="/files/OwNgrHPXIgDkdJpqDD5a" alt="" data-size="line"> **User Pass:** Users are provided with a unique user-password combination, granting them access to the tenant through authentication using their credentials.

<img src="/files/JEfQvFL7OWta5NRfuvpI" alt="" data-size="line">  **Mobile ID:** Users can access the tenant using their mobile devices, using mobile ID authentication for secure and convenient access to the tenant.

Go to '*Administration -> Users*' and click '+ '*Create new user*' in the top right corner. \
When creating a user you are responsible to assign users to relevant roles within Tenant.&#x20;

{% embed url="<https://youtu.be/Fx79peH4FsY>" %}

***

## Creating Roles

### Role Management

As the Tenant admin, you have the ability to create role schemas that govern specific access to reports or permissions possessed by your users.

To manage these roles in your tenant navigate to Administration section and select '*Roles*'.

Role schemas can be categorized into three buckets:

* **System Roles:** ex. Tenant Admin, Report Admin, User Admin, and User - grant users access and permissions to specific areas within the Tenant.&#x20;
* **Report Roles:** These roles are attached to [Power BI Items](/datacentral-knowledge-center/product-guides/item-management.md#workspaces-and-your-tenant) and users in your Tenant. Users can embed reports if they possess the same role attached to the item.
* **Row-Level Security Roles:** Used with the Power BI Service Principal, ensure that users with specific Row-Level Security only access the necessary information from the data model.

Go to '*Administration -> Roles' and click* '+ '*Create new role*' in the top right corner. \
Create  your '*role name*' and give it a specific '*folder path*' to categorize the role.

<figure><img src="/files/kiqCWmXoHZmEZLvyymZL" alt=""><figcaption><p>Creating / Editing role</p></figcaption></figure>

Click permissions '*Role Menu*' and choose which permissions should be accessed through this role.

<figure><img src="/files/SWK25T3jCWJD582Ri08j" alt=""><figcaption><p>Adding permissions to Role</p></figcaption></figure>

{% embed url="<https://youtu.be/4fpPPPQFtds>" %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://uidata.gitbook.io/datacentral-knowledge-center/product-guides/user-and-role-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
