Where user accounts live — one screen, five tabs

The Team & Access menu has two entries — User Accounts and Roles & Permissions — but both lead to the same screen, with a different tab selected.

Step by step

Open the screen and switch tabs

1. In the sidebar, under Configuration, expand Team & Access.
2. Click User Accounts or Roles & Permissions — both entries open the same screen, with a different view selected.
3. Check the heading: it should say Team & Access. The subtitle depends on your permissions: with roles permission it reads Manage user accounts, roles, permissions, and access activity; without it, the shorter Manage user accounts in your company. This is the quickest way to tell what you are missing.
4. Use the tabs below the heading: User Accounts, Roles & Permissions, Live Monitor, Login History, Activity Statistics.

The browser address changes with the tab — #users, #roles, #live, #login-history, #activity. You can share the link and it will open at exactly that tab. The sidebar highlights the menu entry matching the tab you are on. On the other three tabs neither of the two entries is highlighted, but the Team & Access group stays open.

The same rule applies to the horizontal menu: User Accounts and Roles & Permissions are never highlighted at the same time. A screen reader also marks only the entry for the selected tab as current.

Filters set on the user list remain when you switch tabs and return. Each tab has its own query keys (users.q, roles.page), so searching in one does not change the other. Older links with bare keys (?q=...&page=...) still open.

When fewer tabs are visible

1. You see only User Accounts — you have read access to users, but not roles. The other four tabs are absent; they are not merely disabled.
2. You see everything except User Accounts — the reverse: you have roles, but not users.
3. You do not see either Team & Access menu entry — you have neither read permission. This is the only case where you need to ask an administrator (Module permissions — read, write, and create).

If a permission is removed while the screen is open, the system automatically switches you to a tab you can still view.

The five tabs

To open the screen, read access to either permission is enough. So someone with only users can open it, but sees only the first tab — the other four simply do not exist in their view. This is expected.

Two permissions, two different scopes

A distinction that applies throughout this area:

• users — creating and editing accounts: who exists in the company.
• roles — granting permissions: what that person can do.

They are intentionally separate. Someone with only users can create an account but cannot assign it a role — attempts to smuggle roles through the user form are rejected by the server.

Practical implication for roles in your company: roles means “I can grant anyone any access.” Treat it as the highest privilege in the system (Company administrator and superadministrator — who bypasses what).

Two pages that do not exist

Two addresses from the template used to build the interface still circulate: a list of permissions with Support / Users / Manager / Administrator roles, and a user profile preview. Both are demo pages with fictional data and have been removed from routing. If you find a screenshot of either view in older documentation, it is not this system.