# How To Manage User Roles And Access Scope

## Objective

Set each workspace user's ZenOps permissions and, when needed, restrict a BPO User to selected vendors and brands.

## Before you begin

You need the Admin role to manage workspace users. Choose a role that gives the person the access required for their work.

## Resolution

1. Open **Settings**, then select **Users** and find the person in the user list.
2. Select the edit control in that person's row.
3. Choose the role that fits the person's responsibilities:
   - **Admin** has full workspace control, including user management, integrations, billing, and company settings.
   - **Manager** can manage operational work but cannot manage users or roles, billing, or company-wide settings.
   - **User** has standard read and work access across the workspace.
   - **BPO User** is limited to assigned BPO vendors and brands.
4. If you selected **BPO User**, choose the allowed BPO vendors. Optionally narrow **Brand access** to specific brands; leaving the default includes all brands in the selected BPO vendors.
5. Review the role and access scope, then select **Update User**.

Workspace roles control access across ZenOps. They do not assign a person to a workforce team.

> Canonical page: https://zenops.cx/help/articles/manage-user-roles-and-access-scope/
> Audience: For workspace administrators
> Summary: Review ZenOps roles and limit a BPO User to selected vendors and brands.