# Set User Privileges for Logging Service
Users need appropriate privileges to access, create, and modify Logging Service. Without necessary privileges, users have a read-only access and cannot provision changes. You can grant appropriate privileges via the **User Manager**.
{% hint style="warning" %}
**Warning:** User privileges set using the space.vars.ionos\_cloud API or the DCD apply to pipeline access only, not to Grafana access.
{% endhint %}
To allow users to access, create, and modify the Logging Service, follow these steps:
1\. In the DCD, go to **Menu** > **Management** > **Users & Groups**. 2. Select the **Groups** tab in the **User Manager** window. 3. Select the appropriate group to assign relevant privileges. 4. In the **Privileges** tab, select **Access and manage Logging Service** to allow the associated group members to access and manage Logging Service.
{% hint style="info" %}
**Note:** You can remove the privileges from the group by clearing **Access and manage Logging Service**.
{% endhint %}
{% hint style="success" %}
**Result:** Appropriate privilege is granted to the group and the users in the respective group.
{% endhint %}
## Create and manage sub-users
For improved user management and delegation, you can establish sub-users and grant them the necessary permissions to use the Logging Service. Sub-users can be given varying levels of access for their segment of the logging pipeline by the primary account owners. Only the pipelines that the primary account owner has assigned to sub-users are visible to them and can be managed, but they cannot access the primary account or pipelines created by other sub-users.
To create sub-users, follow these steps:
1\. In the DCD, go to **Menu** > **Management** > **Users & Groups**. 2. Select the **Groups** tab in the **User Manager** window. 3. Select the appropriate group to assign relevant privileges. 4. In the **Members** tab, click **+ Add User** and select a user(s) from the list.
To delete an associated sub-user, click **Remove User**.
{% hint style="success" %}
**Result:** A sub-user(s) is created.
{% endhint %}
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.ionos.com/cloud/observability/logging-service/dcd-how-tos/set-privileges-logging-service.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.