> For the complete documentation index, see [llms.txt](https://docs.ionos.com/cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ionos.com/cloud/sovereign-workplace/nextcloud-workspace/how-tos/set-user-privileges-nextcloud-workspace.md).
# Set User Privileges
Assign and revoke DCD group privileges to control which IONOS CLOUD users can provision and manage Nextcloud Workspaces.
Configure DCD group privileges to control which space.vars.ionos\_cloud users can provision and modify Nextcloud Workspaces. Specifically, assigning the **Access and manage Nextcloud Workspace** privilege grants members the permissions required to create, modify, and delete the workspaces themselves. This infrastructure-level privilege governs administrative access at the space.vars.ionos\_cloud level only and it does not affect user, group, or permission management within your Nextcloud Workspace instance.
The following table illustrates the difference between these two management levels:
| **Management Level** | **What it controls** | **Example Action** |
| ---------------------------------------- | ------------------------------------------- | ------------------------------------------------------------------------------------------ |
| **DCD group privilege (Infrastructure)** | The Nextcloud Workspace environment. | Provisioning a new workspace, scaling resources, or deleting the environment entirely. |
| **Nextcloud management (application)** | The files and users within the application. | Adding to the workspace, resetting a password, or sharing a folder. |
{% hint style="info" %}
**Prerequisite:** Make sure you have one or more **Groups** in the **User Manager**. To create one, see [Create a group](/cloud/set-up-ionos-cloud/management/identity-access-management/user-management.md#create-a-group).
{% endhint %}
To set user privileges, follow these steps:
1\. In the **DCD**, go to **Menu** > **Management** > **Users & Groups**.
2\. Select the **Groups** tab in the **User Manager** window.
3\. Select the appropriate group to which you want to assign privileges from the list of groups.
4\. In the **Privileges** tab, select **Access and manage Nextcloud Workspace**.
{% hint style="success" %}
**Result:** The privilege to manage Nextcloud Workspace resources is granted to all the users in the selected group.
{% endhint %}
## Revoke user privileges
To revoke user privileges, follow these steps:
1\. In the **DCD**, go to **Menu** > **Management** > **Users & Groups**.
2\. Choose one of the following options:
Option 1: Remove the User from all the Groups in which the Privilege is Enabled
1\. Select the user from the **Users** tab in the **User Manager** window.
2\. Go to the **Groups** tab, select the group name enabling the privilege, and click **Remove from Group**.
3\. Repeat **step 2** for all the groups where the privilege to be revoked is applied.
Option 2: Remove the Privilege from all the Groups the User Belongs To
1\. Select the **Groups** tab in the **User Manager** window.
2\. Select the **Group Name** in which the privilege to be revoked is applied and the user belongs to this group.
3\. Clear the checkbox against the privilege name.
4\. Repeat steps **2** and **3** for all the groups where the privilege to be revoked is applied.
{% hint style="warning" %}
**Warning:** This option removes the privilege for all the members in the groups from which the privilege is revoked.
{% endhint %}
{% hint style="info" %}
**Note:** To revoke this privilege from a contract administrator, turn off the administrator option on the user account. After performing this action, the contract administrator will become a contract user, and the privileges set up for the user before becoming an administrator will be in effect.
{% endhint %}
{% hint style="success" %}
**Result:** The privilege is successfully revoked.
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.ionos.com/cloud/sovereign-workplace/nextcloud-workspace/how-tos/set-user-privileges-nextcloud-workspace.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.