# Add users and set their roles

Last updated: 2026-10-27

> Give people access to your app by email address or email domain, and choose what each person can do.

Admins choose who can open your app. You add people by email address, or let a whole email domain in at once.

## Open the permissions page

1. Click your app's logo in the top-left corner.
2. Click **Settings**.

![The logo menu, with Settings](https://restorationscope.com/docs/add-users/menu.png)

3. Settings opens on **Permissions**. If it doesn't, click **Members & Permissions** in the sidebar.

![The Permissions page](https://restorationscope.com/docs/add-users/permissions.png)

## Add people

1. Click **+ Add Email/Domain**.
2. Type one or more email addresses or domains, separated by commas:
   - An email address, such as `andy@demo.com`, lets that one person in.
   - A domain, such as `demo.com`, lets in anyone who signs in with an email address at that domain.
3. Choose a **Role** and click **Add**. Every entry you typed gets the same role.

People don't get an email when you add them. Send them your app's link and ask them to sign in with the address you added.

## Roles

- 👁️ **Viewer**: sees information.
- ✏️ **Editor**: sees information, and creates, edits and deletes it.
- ⚙️ **Admin**: everything an editor can do, plus the **Settings** menu and adding other people.

A domain has a role too. Someone who joins through a domain gets the domain's role: if you added `demo.com` as **Viewer**, `mary@demo.com` joins as a viewer.

## See and change who has access

- **Users via Domain Access** lists who joined through a domain, with the domain's role. To give one of them a different role, add their email address through **+ Add Email/Domain** with that role. A role on someone's own email address wins over their domain's.
- **Invited Users** lists people you added who haven't signed in yet.
- To remove a person you added by email, or a domain, click the trash icon on its row. Removing a domain removes everyone who joined only through it.