> For the complete documentation index, see [llms.txt](https://docs.ionos.com/cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ionos.com/cloud/~/revisions/AMiYziCllTKB2y2lmONY/getting-started/basic-tutorials/manage-user-access.md).
# Manage User Access
This tutorial guides you through creating and managing Users, User Groups, and Resources in the [Virtual Data Center (VDC)](https://docs.ionos.com/support/general-information/glossary-of-terms#virtual-data-center-vdc).
{% hint style="info" %}
**Prerequisites:** Make sure you have the appropriate privileges. Only contract administrators and owners can manage users within a VDC.
{% endhint %}
## User access control
A new VDC in the Data Center Designer (DCD) is manageable by contract owners. To assign resource management capabilities to other members in VDC, you can add users and groups and grant them appropriate privileges to work with the data center resources.
## Create a user
The **User Manager** lets you create new users, add them to user groups, and assign privileges to each group. Privileges either limit or increase your access based on the user role. The **User Manager** lets you control user access to specific areas of your VDC.
1. In the **DCD**, go to **Menu** > **Management** > **Users & Groups**.
2. Select **+ Create** in the **Users** tab.
3. Enter the user's **First Name**, **Last Name**, **Email**, and **Password**.
{% hint style="info" %}
**Note:**
— The email address of the new user must be unique.
— The password must adhere to the contract's password policy. For more information, see [Manage Password Policy](/cloud/~/revisions/AMiYziCllTKB2y2lmONY/getting-started/basic-tutorials/manage-password-policy.md).
{% endhint %}
4. Select **Create** to confirm.
{% hint style="success" %}
**Result:** A user is successfully created and listed in the **Users** list.
{% endhint %}
## Create a group
The creation of groups is useful when you need to assign specific duties to the members of a group. You can create a group and add members to this group. You can then assign privileges to the entire group.
1. In the **Groups** tab, select **+ Create**.
2. Enter a **Group Name**.
3. Select **Create** to confirm.
{% hint style="success" %}
**Result:** The group is now created and visible in the **Groups** list. You can now assign permissions, users, and resources to your group.
{% endhint %}
### Assign privileges to a group
1. In the **Groups** tab, select a group from the Groups list.
2. In the **Privileges** tab, select checkboxes next to the privilege name.
{% hint style="info" %}
**Note:** You do not need to save your selections. This action automatically grants or removes privileges.
{% endhint %}
{% hint style="success" %}
**Result:** The group has the required privileges now.
{% endhint %}
{% hint style="info" %}
**Note:** To remove the privileges for a group, clear the checkbox next to the privilege name.
{% endhint %}
## Add users to a group
Users are added to your new group on an individual basis. Once you have created a new member, you must assign them to the group.
1. In the **Groups** tab, select the required group.
2. In the **Members** tab, add users from the **+ Add User** drop-down list.
{% hint style="success" %}
**Result:** The users are now assigned to the group. These users have privileges and access rights to the resources corresponding to their group.
{% endhint %}
### Benefits of user group assignment
When assigning a user to a group, whether you are a contract owner or an administrator, you can:
* [Create a new user](#create-a-user) within DCD.
* Determine the resources that members of this group can access. These resources could be:
* [VDCs](https://docs.ionos.com/support/general-information/glossary-of-terms#virtual-data-center-vdc)
* [Images](https://docs.ionos.com/support/general-information/glossary-of-terms#image)
* [Snapshots](https://docs.ionos.com/support/general-information/glossary-of-terms#snapshot)
* IP blocks
{% hint style="info" %}
**Note:** Administrators do not need to be managed in groups, as they automatically have access to all resources associated with the contract.
{% endhint %}
### Add group to a resource
1. In the **Resources** tab, select a resource from the drop-down list.
2. In the **Visible to Groups** tab, click **+ Add Group**.
3. Select a group from the drop-down list.
{% hint style="success" %}
**Result:** This group can now access the allocated resource.
{% endhint %}
### Assign resources to a group
1. In the **Groups** tab, select the required group.
2. Select the **Resources of Group** tab.
3. Click **+ Grant Access** and select the resource to be assigned to the group from the drop-down list.
{% hint style="success" %}
**Result:** The group now has the newly assigned resources. You have enabled **read** access for the selected resource.
{% endhint %}
### Enable or disable access for a resource
* To enable access, select the **Edit** or **Share** checkbox for a resource.
* To disable access, select the required resource. Clear either the **Edit** or **Share** checkboxes. You can also directly click **Revoke Access**.
## Remove a user from the group
Users can be removed from your group on an individual basis.
1. Select the **Members** tab.
2. Click **Remove User**.
{% hint style="success" %}
**Result:** This user is now removed from the group.
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.ionos.com/cloud/~/revisions/AMiYziCllTKB2y2lmONY/getting-started/basic-tutorials/manage-user-access.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.