Add users and choose their role
Admins and Team Owners manage the people who can sign in to enrola in Settings → Users. Each person has their own account and one role.
Roles
| Role | In short |
|---|---|
| Read Only | Can view lists and records, but not change anything. |
| User | Can work with Opportunities, Applications, Learners, Employers and Contacts. |
| Admin | Everything a User can do, plus most of Settings and managing users. |
| Team Owner | Everything an Admin can do, plus Integrations, Billing (when it's switched on) and API keys. |
You can give someone a role up to your own: an Admin can't make someone a Team Owner. For the full detail, see Permission groups: what each group can see and change.
Add a user
- Go to Settings → Users and select Add.
- Switch on Enabled.
- Enter their Email. They will sign in with this address.
- Enter their First name, Last name and, if you like, Phone.
- Choose their Role.
- Select Save.
enrola shows "Success: User created." and emails the person "Set up your enrola account" with a link to choose their own password. The link works for 7 days. You don't choose or see their password. See Set up your account from your invitation email.

Important. New users start with Enabled switched off. If you leave it off, they still get the email, but enrola says "This account isn't enabled" when they try to sign in.
The Add User page also shows "You'll be charged a prorated amount for each active member". See How enrola is priced.
Change a user
- In Settings → Users, find the person (use Search users if the list is long) and select Edit.
- Change what you need.
- Type your own password in Current password.
- Select Save.
enrola asks for your current password before it saves any change on this page, to check it's really you.

Admins can change users whose role is Admin or lower. Team Owners can change anyone in their organisation.
What happens when you…
| You… | What happens |
|---|---|
| switch off Enabled | The person is signed out everywhere straight away and can't sign in. Their records stay. |
| change their Email | They sign in with the new address from now on, and may need to sign in again straight away. Email sign-in codes, from 27 October 2026, go to the new address. |
| change their Role | enrola may sign them out. When they sign in again, they have the new role's menus and actions. |
| select Reset password and confirm | Their password stops working, they are signed out everywhere, and they get an email called "enrola: choose a new password" with a link that works for 1 hour. |
| select Sign out all devices and confirm | They are signed out everywhere, but their password doesn't change. |
Delete a user
In Settings → Users, select Delete beside the person and confirm with Yes. enrola shows "Success: User deleted."
Tip. If someone has left but you may need to check their work, switch off Enabled instead of deleting them.
Good to know
- Each person's details, including their own password, are on their page. Anyone can open their own page from their name in the header, then Edit user.
- The list shows each person's Type (their role) and the organisations they belong to.
- To give someone access to a second organisation, see Organisation details.
- Team Owners also see an Auth tab on a user's page, for connecting systems through enrola's API. See Use enrola's API from your own systems.