> For the complete documentation index, see [llms.txt](https://docs.bsure.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bsure.io/user-guides/settings/configuration/users-management.md).

# Users Management

### Accessing User Management

Navigate to **Settings → Configuration** in the left sidebar, then select **Users Management**. You can also access it directly via the URL path */admin-settings/users*.

Users Management is used to control who can access Bsure, what role they have, and which features and reports they can use.

From this page, administrators can manage access for both individual users and groups.

### Users and groups

Bsure supports two ways of giving access:

| Type  | Description                                                                                                    |
| ----- | -------------------------------------------------------------------------------------------------------------- |
| User  | Gives access to one specific user. User access can be configured with role, app features and Power BI reports. |
| Group | Gives access to all members of an Entra ID group. Group access always gives Member access.                     |

Groups are useful when many users should have the same basic access, without managing each user individually.

Group members get access to:

* KPI Dashboard without drilldown
* My Team, if they are a line manager
* My Organization, if the user is explicitly configured for this
* Application Owner, if the user is explicitly configured as an application owner

Group access does not give admin access.

### Add users

Click **Add Users** to add one or more individual users.

Select role and features you want to provide, click next and select user(s) and press Add

After a user is added, open the user menu and select **Edit roles & permissions** to adjust access.

### Add groups

Click **Add Group** to add an Entra ID group.

Users who are members of the group will receive Member access automatically. This is intended for basic access scenarios where users should only see the data they are allowed to act on.

### Check user access

Use **Check user access** to verify what access a specific user has.

This is useful when a user receives access through a group and direct user assignment.

### Account roles

Bsure Insights has two roles:

* **Super Admin** – full access to everything in the application: every Power BI report, every Configuration tab, every System tab, and the Impact Dashboard delegation flow.
* **Member** – scoped access. The user sees only the report areas listed in their **Permissions** column. They cannot open the Configuration or System Settings pages.

Use Super Admin only for the people who need to change configuration. For everyone else, assign Member with just the permissions they need.

### App features

App features control access to selected functionality in the web app.

| Feature            | Description                                                             |
| ------------------ | ----------------------------------------------------------------------- |
| KPI Drilldown      | Allows the user to open drilldown pages from KPI Dashboard tiles.       |
| AI Chat            | Allows the user to ask questions across all data in the Bsure database. |
| Global Assessments | Allows the user to access and drill into all configured assessments.    |

#### AI Chat

The **AI Chat** toggle is only available after AI Chat has been configured in System Settings.

AI Chat gives broad access to query data in the database, so it should only be enabled for trusted users.

#### Global Assessments

The **Global Assessments** toggle gives access to the Assessments page.

The page will be empty until assessments have been enabled and configured. Assessment setup is handled separately in the Global Assessments configuration.

### Power BI reports

Power BI report access controls which embedded Power BI workspaces and reports the user can open in Bsure.

Enable the reports the user should have access to, or use **Select all reports** if the user should have access to all available reports.

### Recommended setup

Use groups for broad Member access.

Use direct user assignments when a user needs additional access, such as:

* Super Admin
* KPI Drilldown
* AI Chat
* Global Assessments
* Power BI reports

This keeps basic access simple while still allowing elevated permissions to be controlled per user.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.bsure.io/user-guides/settings/configuration/users-management.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.