# Set User Privileges

MaaS has a group privilege called **Access and manage monitoring**. Upon selection, the members of the respective group inherit this privilege.

Once the privilege is granted, contract users can create, access, manage, and use MaaS without additional permissions.

{% hint style="info" %}
**Prerequisite:** Make sure you have one or more **Groups** in the **User Manager**. To create one, see [<mark style="color:blue;">Create a group</mark>](https://docs.ionos.com/sections-test/guides/set-up-ionos-cloud/management/identity-access-management/user-management#create-a-group).
{% endhint %}

To set user privileges to access and manage monitoring services, follow these steps:

1. In the **DCD**, go to **Menu** > **Management** > **Users & Groups**.
2. Select the **Groups** tab in the **User Manager** window.
3. Select the target group name from the **Groups** list.
4. Select **Access and manage monitoring** option in the **Privileges** tab.

![Set Access and manage monitoring privilege](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-51ec4688f2fe514bb387666e9367bf85ff557d95%2Faccess-manage-checkbox.png?alt=media)

{% hint style="success" %}
**Result:** The **Access and manage monitoring** privilege is granted to all the members in the selected group.
{% endhint %}

### Revoke user privileges

You can revoke a user's privilege by removing the user from all the groups with this privilege enabled.

{% hint style="warning" %}
**Warning:** You can revoke a user's privilege by clearing **Access and manage monitoring** for every group the user belongs to. In this case, all the members in the respective groups would also be revoked from this privilege.
{% endhint %}

To revoke this privilege from a contract administrator, disable the administrator option on the user account. On performing this action, the contract administrator gets the role of a contract user and the privileges that were set up for the user before being an administrator will then be in effect.