# Manage users, roles and portal access

> Grant each user access according to their responsibilities, the companies they work for and the records they need.

Fonte: https://docs.kmee.com.br/en/odoo/funcional/administracao/usuarios-papeis-e-acesso-ao-portal/

Grant each user access according to their responsibilities, the companies they work for and the records they need.

## Before you start

Make the changes with an administrator user and keep at hand the role definitions approved by your company. Internal users and portal contacts serve different purposes: internal users work in the apps, and portal contacts view their own orders, invoices and projects.

## Step by step

### 1. Create or update the user

In Settings > Users & Companies > Users, create the user or open an existing one. Check the name, login, user type, default company, allowed companies and language. Assign only the minimum functional access the person needs for the job. Before sending the invitation or the password reset, check the recipient's email address.

### 2. Assign the functional roles

In Settings > Users & Companies, open the user roles and check the access groups each role brings together. Assign the role to the user, with start and end dates when the access is temporary. Roles add up, and the user's groups become those of the assigned roles. Before changing a role shared by several people, check the list of users who have it.

### 3. Review portal access and two-factor authentication

Grant portal access from the right contact and check that it is linked to the correct customer and company. Review which orders, invoices and projects this contact will see. Each user turns on two-factor authentication in the security settings of their own account; before replacing the authenticator app, keep the configured recovery method.

### 4. Check and end access

Sign in with a user who has the assigned role and check the main menus and records, including another company whose access should stay restricted. When a role expires or the person leaves the company, review the active roles, the allowed companies, portal access and the user status, following the company's internal procedure.

## Expected result

Each user does their own work with checked access to the companies and records they need.

## If something goes wrong

If a menu does not appear for a user, check the active company, the role validity dates and the groups the role brings together, and adjust the role instead of granting administrator access.

## Continue the process

- [Companies, users and email](https://docs.kmee.com.br/en/odoo/enterprise/funcional/administracao/)
- [Import records and make bulk updates](https://docs.kmee.com.br/en/odoo/enterprise/funcional/administracao/importar-e-alterar-registros-em-lote/)