Manage users within a Business Unit
As a Business Unit user, you can manage users and User Groups within the Business Units linked to your own User Groups. Your actions are scoped to those Business Units, so you cannot view or modify users or groups outside your scope.
When roles are configured for your Business Units, role management is also scoped. You can see and assign only the roles linked to your Business Units.
Business Unit users see only the Business Units linked to their User Groups. Super Admins see all Business Units in the instance.
Filter users by Business Unit
The Users management page includes a Business Unit filter that helps you find users belonging to a specific Business Unit.
- Go to System > User management > Users.
- Open the Business Unit filter in the filter bar.
- Select one or more Business Units. Only Business Units that you can access are listed.
The list updates to show users whose User Groups are linked to the selected Business Units.

Filter User Groups by Business Unit
The same filter is available on the User Groups management page.
- Go to System > User management > User groups.
- Open the Business Unit filter.
- Select one or more Business Units to filter the list.

Create a user in your Business Unit
When you create a user as a Business Unit user, you can assign only User Groups linked to your own Business Units. Groups from other Business Units are not available in the selection.
- Go to System > User management > Users.
- Click Create user.
- Fill in the user details.
- In the Groups field, select one or more User Groups from your accessible Business Units.
- Click Save.
A user with no User Group linked to a Business Unit is not scoped to a Business Unit. Assign at least one relevant User Group before saving.
Edit a user's groups and roles within your Business Unit
When editing a user, you can add or remove User Groups from your accessible Business Units. User Groups linked to other Business Units remain on the user but are locked, so you cannot remove them.
If roles are configured for your Business Units, you can add only those roles. Roles already assigned to the user that are outside your scope remain on the user and are locked.
- Go to System > User management > Users.
- Open the user you want to edit.
- In the Groups field, add or remove User Groups within your Business Unit scope.
- In the Roles field, add or remove roles linked to your Business Units.
- Click Save.
Locked User Groups and roles belong to Business Units outside your scope. You can manage items within your scope alongside them, but you cannot remove the locked items.
Manage roles in your Business Unit
When roles are linked to your Business Units, your access is limited to those roles:
- Role list and role pages: Roles outside your scope are not displayed and cannot be opened, edited, or deleted.
- User imports: Roles outside your scope are ignored and a warning is added to the import report. Existing roles outside your scope remain assigned to the user.
- Role imports: Rows that update a role outside your scope are skipped. You can still create a new role, but it is not visible to you until a Super Admin links it to one of your Business Units.
- Role exports: Only roles linked to your Business Units are exported.
If none of your Business Units has linked roles, roles are not restricted. User exports are not restricted and continue to include all roles assigned to exported users.