# Set User Privileges for Network Security Groups

Contract administrators and owner can create and manage NSGs within a data center. Contract sub-users need appropriate privileges to use and modify NSGs, without which they have read-only access and cannot provision changes. You can grant appropriate NSG privileges to contract sub-users via the **User Manager**.

If you turn off the privilege, your contract sub-users can manage the defined NSGs, provided they can access the respective data center.

To allow users to create NSGs, follow these steps:

1\. In the **DCD**, go to **Menu** > **MANAGEMENT** > **Users & Groups**.

2\. Select **Groups** tab in the **User Manager** window.

3\. Select the appropriate group to assign relevant privileges.

4\. In the **Privileges** tab, select the **Create Network Security Groups** checkbox to allow the group members to create and use it.

![Grant privileges to access NSGs](/files/gTqwIJWMcb9MFX3TrkL3)

{% hint style="info" %}
**Note:** You can remove the privileges from the group by clearing the **Create Network Security Groups** checkbox.
{% endhint %}

{% hint style="success" %}
**Result:** The group and its users are granted appropriate privileges.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ionos.com/cloud/security/network-security-groups/how-tos/set-user-privileges.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.