Manage organizations, users, roles, and groups

Use System Management > Organization Management for manual maintenance. Integrated identities follow enterprise integration agreements.

Distinguish objects

Object	Purpose
Organization	Formal hierarchy and membership
User	Login identity, profile, enablement
Role	Feature/action rights
Group	Virtual teams, bulk grants, multi-person approval

Feature rights do not automatically grant all business objects.

Create organizations

1. Select a parent in Organization Management.
2. Add a child and complete information.
3. Verify the unique, immutable code; save.
4. Inspect hierarchy/users.

Edit supported fields. Resolve children/users before deletion.

Move personnel

Add existing users in organization membership lists. Users require an organization. Transfer through user organization fields or supported add-to-target actions, then verify final membership rather than simply removing membership.

Define roles

1. Create a role.
2. Select module, feature, and action rights.
3. Save/reopen to verify.
4. Add/remove members.
5. Test as the target user.

Default roles exist and can be adapted. Suggested responsibilities include platform administration, data ownership, stewardship, module administration, and consumption. Inspect actual grants rather than names.

Create users

Prepare roles, systems, and organizations first.

1. Open User Management > New.
2. Complete profile and role/system/organization associations.
3. Save.
4. Check organization/role membership.
5. Have the user verify modules and object access.

Edit profiles and enable/disable as needed. Disabled users cannot log in; separately transfer tasks, approvals, and ownership for departures.

Maintain groups

Create/save a group, add users in Members, remove users where needed, edit group details, and check approval/grant dependencies before deletion.

Troubleshoot

Issue	Checks
Missing creation options	Roles, systems, organizations
Login failure	Enablement/authentication
Missing menu	License and feature grants
Missing objects	Module object scope
Cannot delete organization	Children/users
Wrong approver	Organization, groups, participants

Related: Workflows, Licenses, Quick start.