---
title: "Capsule 5: User and Role Management"
description: "**Objective:** Manage who has access and what they can do within the platform. --- **Español** [https://despapeliza.io/wp-content/uploads/2026/10/bdmig-ec7be9b95fd1ab92d96c.mp4](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-ec7be9b95fd1ab92d96c.mp4)   --- **English** [https://despapeliza.io/wp-content/uploads/2026/10/bdmig-bf10a3f8074d0db77408.mp4](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-bf10a3f8074d0db77408.mp4)   --- **Português** [https://despapeliza.io/wp-content/uploads/2026/10/bdmig-4d7c98746fe67c73abd8.mp4](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-4d7c98746fe67c73abd8.mp4)   --- ### **1. Go to Users** From the left-hand menu, click on **Users** to access…"
url: "https://despapeliza.io/docs/capsule-5-user-and-role-management/"
updated: "2026-10-28"
category: Manage Legale.io in 10 Capsules
---

# Capsule 5: User and Role Management

**Objective:** Manage who has access and what they can do within the platform.

---

**Español**

  [https://despapeliza.io/wp-content/uploads/2026/10/bdmig-ec7be9b95fd1ab92d96c.mp4](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-ec7be9b95fd1ab92d96c.mp4)

 

---

**English**

 [https://despapeliza.io/wp-content/uploads/2026/10/bdmig-bf10a3f8074d0db77408.mp4](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-bf10a3f8074d0db77408.mp4)

 

---

**Português**

 [https://despapeliza.io/wp-content/uploads/2026/10/bdmig-4d7c98746fe67c73abd8.mp4](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-4d7c98746fe67c73abd8.mp4)

 

---

### **1. Go to Users**

From the left-hand menu, click on **Users** to access the user management section.
Click on the **New user** button to open the new user creation form.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-5d60c820ed1b55a8cb58.png)

---

### **2. Fill in the user details**

Complete the required fields: email, first name, last names, phone number, position, ID type, and ID number.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-a755641cd0d52681816b.png)

Configure the available roles and permissions grouped by module:

**Workflow:** Add signer, save flow, use saved flow, pause and resend.
**Folder permission:** View/Move, create folder, edit folder properties, delete, rename documents.
**Administration:** Create users, add in filter.
**CSV automation and Smart document:** Associate documents, edit smart documents.

Finish by clicking **Create** to save the user.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-4c68d4d5a27f5c574ad2.png)

---

### **3. User successfully created**

Once created, the user will appear in the list with their name, email, and creation date.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-1af2f0cd9422d7ad9480.png)

---

### **4. Edit a user**

Select the user and click on **Edit** to configure what actions they are allowed to perform.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-56d07cf8bc11cd708f19.png)

---

### **5. Confirm and save changes**

Edit credentials and enable or disable the appropriate permissions for the user, then click **Update**.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-2a8bcd3e844ab944dcc6.png)

---

### **6. Select the user to delete**

Check the box of the user you want to remove and click **Delete**.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-343680c5a4c0fb0e49f1.png)

---

### **7. Confirm the email and delete**

Type in the email address of the user to validate the deletion, then click **Delete**.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-bc802bc11f7ebd186c2b.png)

---

### **8. Confirm document handling before deletion**

The system will ask if you want to move the user's documents to another account before deleting.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-67867e4dd5e8b0c4ecc3.png)

---

### **9. User deleted**

The user is now removed from the system and no longer appears in the list.

![](https://despapeliza.io/wp-content/uploads/2026/10/bdmig-1414c844db10b3dd341e.png)

---

### **Security Tips:**

**Regular access rotation**

Change passwords or privileged access at least every 3 months to reduce exposure to risks.

**Principle of least privilege**

Assign users only the permissions they strictly need to perform their tasks.

**Role separation**

Maintain a clear distinction between administrative roles, signers, and view-only users.

**Frequent auditing**

Periodically review user activity logs and accessed documents for suspicious or unusual behavior.

**Two-factor authentication (2FA)**

Enable 2FA for admin users whenever possible to strengthen account security.