Overview

The Users panel in Enterprise Settings is where you control who can sign in to your enterprise organization in Turris and what each person is allowed to do. From one screen, enterprise administrators invite teammates, edit their details, change role assignments, and remove access when someone leaves.

What is the Users Settings Panel?

Keep your enterprise membership list accurate and decide, per person, who can access the enterprise application and what they can do once they are in. The Users panel is the membership directory for your enterprise organization, the top-level account that rolls up multiple child upstream entities.

Who uses it. Enterprise administrators (the Admin role on the enterprise upstream entity), typically a licensing manager, compliance lead, or operations owner at a multi-organization carrier or MGA group. Non-administrators can open the panel too, but only to view the directory and edit their own personal details.

This panel lets you:

See every teammate who has access to the enterprise organization, listed alphabetically by first name.
Invite a new teammate by entering their name and email and assigning a role.
Update a teammate's name, position, or role without changing their sign-in identity.
Remove a teammate's access when they leave or change responsibilities.
Confirm at a glance who holds the Admin role versus who has read-only access.

Accessing the Users Panel

The Users panel lives inside the global Settings modal, so you can reach it from any page in the Enterprise Upstream app.

Open Left sidebar (bottom) → Settings. The Settings modal opens on top of whatever page you were on.
In the settings category list inside the modal, click Users (the two-people icon).
The Users panel loads. Close the modal at any time to return to the page you came from.

What's visible on the panel

A short banner at the top reads: "You can add users to your enterprise organization and assign them roles with different access rights. This allows you to control who can access and modify your data."

Element	Description
Users banner	The explanatory message shown above the controls.
Add User button	Sits to the right, between the banner and the table. Opens the slide-over to invite a teammate. Visible only to administrators.
Users table	Lists every teammate in the enterprise organization, sorted alphabetically by first name.

The Users table has three columns:

Column	Description
User	A round avatar with the teammate's two initials, their full name in bold, and their position underneath when one is set.
Email	The teammate's email address. Click the copy icon next to it to copy the address to your clipboard.
Roles	One badge per assigned role (for example, Admin), showing every role currently granted to that teammate.

To open a teammate's profile, click their row. The Update User slide-over opens with their details prefilled. Non-administrators can only open their own row; clicking anyone else's row shows the error "You do not have permission to update users."

Adding a User

When you'd do this. A new teammate has joined and needs access to the enterprise application, or you want to give a colleague the Admin role so they can help manage settings and users.

Only administrators can add users; the Add User button is hidden for everyone else.

Click Add User (to the right, above the Users table).
The Add User slide-over opens, subtitled Create a new user.
Fill in the form:

Field	Required	Description
First Name	Yes	The teammate's first name. Example: `Alex`.
Last Name	Yes	The teammate's last name. Example: `Morgan`.
Position	No	Job title shown under their name in the directory. Example: `Director of Compliance`.
Email	Yes	The teammate's work email; must be a valid email format (for example, `alex.morgan@acme.com`). This becomes their sign-in identity.
Roles	Yes	Pick at least one role from the Roles dropdown. The dropdown currently offers a single assignable role, Admin, and supports selecting more than one when others become available.

Click Add. The button shows a spinner while the invitation is created, and it stays disabled until every required field is valid.
A "Member added successfully" message confirms the invite, and the new teammate appears in the Users table.

Note: The Email field cannot be changed after a user is created. Double-check it before clicking Add. To fix an email later, delete the user and add them again with the correct address.

Updating a User

When you'd do this. A teammate's job title changed, you mistyped a name when inviting them, or you want to grant or remove the Admin role.

In the Users table, click the row for the teammate you want to update.
The Update User slide-over opens with their current details prefilled; the subtitle shows their full name.
Edit the available fields:

Field	Editable by	Notes
First Name	Anyone who can open the row	Updates the display name and avatar initials.
Last Name	Anyone who can open the row	Updates the display name and avatar initials.
Position	Anyone who can open the row	Optional; shown in the User column.
Email	No one	Locked once the user exists.
Roles	Administrators only	Multi-select dropdown; hidden entirely for non-administrators.

Click Update to save. The button stays disabled until you have made at least one change.
A "Member updated successfully" message confirms the change.

Note: You cannot delete your own account from this panel; the Delete button is hidden on your own row. If you need to be removed, another administrator has to do it for you.

Who can do what

Signed-in role	Open another teammate's row?	Edit roles?	Edit own profile?	Delete a teammate?
Admin	Yes (any row)	Yes (any row, including your own)	Yes (name, position, and roles)	Yes (anyone except yourself)
Non-admin	No (error shown)	No (selector hidden)	Yes (name and position only)	No

Removing a User

When you'd do this. A teammate has left the company, no longer needs enterprise access, or was invited by mistake.

Only administrators can delete users, and you cannot delete yourself.

In the Users table, click the row of the teammate you want to remove.
The Update User slide-over opens. Click Delete in the footer (to the left of Update; shown only when an administrator views someone else's row).
A confirmation modal asks: "Are you sure you want to delete the user '<first name> <last name>'?"
Click Delete to confirm, or Cancel to keep the teammate.
A "Member deleted successfully" message confirms it, and the teammate disappears from the table.

Warning: Deletion is immediate and cannot be undone. The teammate loses access to the enterprise organization the next time they try to sign in. To restore access, invite them again as a new user.

Roles

Roles decide what a teammate can do once signed in. The Roles selector in the Add User and Update User slide-overs is available only to administrators; the role badges in the table are visible to everyone.

Color	Label	Meaning	What to do about it
Primary badge	Admin	Full read and write access. Can manage users, edit enterprise settings, and act across the enterprise application.	Reserve for the small group of teammates who genuinely need to manage settings or users.
No Admin badge	Read-only member	The teammate can sign in, view enterprise data, and edit their own profile, but cannot manage users or change settings.	Fine for teammates who only consume reports and dashboards. If they later need to manage settings, an administrator must grant them Admin.

Tip: If a teammate says they cannot see the Add User button or change enterprise settings, check the Roles column for their row. They likely need the Admin role, which another administrator can grant from the Update User slide-over.

Frequently Asked Questions

Why don't I see the Add User button? Only administrators can invite users. If the button is missing, your account does not hold the Admin role. Ask another administrator to grant you the role, or to add the new teammate for you.

Can I change a user's email address? No. The Email field is locked once a user has been created. To use a different email, delete the user and add a new one with the correct address.

Can I change my own role? If you are an administrator, yes. The Roles selector appears on your own row, so you can adjust your own roles just as you would anyone else's. The one thing you cannot do to your own account is delete it, because the Delete button is hidden on your own row.

What happens when I delete a user? The teammate is removed from the enterprise organization immediately and loses access on their next sign-in attempt. There is no undo: to restore access, invite them again as a new user.

Why do I see "You do not have permission to update users" when I click a row? Non-administrators can only open their own profile. Clicking any other teammate's row triggers this message, because only administrators may edit other users.

Is the enterprise Users panel the same as the user list inside a child organization? No. This panel manages members of the enterprise organization itself (the top-level account that rolls up multiple child upstream entities). Each child upstream entity also has its own Users settings, managed from within that entity's own Settings modal.

Best Practices

Grant Admin sparingly. The Admin role is full control over the enterprise. Keep it to the smallest group who genuinely need to manage settings or other users.
Keep at least two administrators. More than one Admin means the organization is not locked out if a single administrator leaves or loses access to their email.
Use accurate names and positions. A complete directory makes it easy for the team to tell who is who in the Users table, especially in larger enterprises.
Remove teammates promptly when they leave. Delete a user as soon as they no longer need access. It keeps the enterprise secure and the directory clean.
Double-check the email before clicking Add. Because Email cannot be edited later, getting it right the first time avoids deleting and re-adding the user.

Enterprise Settings: Policy Licensing: The Policy Licensing settings panel is where an enterprise administrator picks the default rule the Policy Licensing report uses to decide whether each policy is compliant, applied across every member organization in the enterprise.