> This page is for Docs.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# User roles

> Administrators can manage user roles and permissions from Administration Settings.

Administrators can manage user roles and permissions from Administration Settings.

You must be an administrator in Zuora to assign permissions and roles. You can also create custom user roles to control user permissions at a more granular level.

## Standard user roles

The Zuora UI provides several types of roles, and each role type has its set of own privileges. Our standard Zuora roles include the following:

* [Platform roles](/docs/platform/security-and-identity/administrator-settings/user-roles/platform-roles)
* [Billing roles](/docs/platform/security-and-identity/administrator-settings/user-roles/billing-roles)
* [Finance roles](/docs/platform/security-and-identity/administrator-settings/user-roles/finance-roles)
* [Payment roles](/docs/platform/security-and-identity/administrator-settings/user-roles/payments-roles)
* [Commerce roles](/docs/platform/security-and-identity/administrator-settings/user-roles/commerce-roles)
* [Reporting roles](/docs/platform/security-and-identity/administrator-settings/user-roles/reporting-roles)

The roles available to manage can vary depending on the Zuora products you are using. If you are not using Finance, for example, the Zuora Finance Administrator role will not be available.

## API user role

If your tenant makes use of the Zuora SOAP APIs or REST APIs, create a special user role just for that purpose. For more information, see [Creating an API user](/docs/platform/security-and-identity/administrator-settings/manage-users/create-an-api-user/create-new-api-user-process-flow).

## Manage roles

Click your user name at the top right and navigate to **Admin settings user role mngt**.

You can do the following role management:

* View the permissions associated with the selected role.
* Assign or revoke permissions with the selected role.
* [Create a custom role](/docs/platform/security-and-identity/administrator-settings/user-roles/create-custom-user-role) or remove a custom role.

## Assign a role to a user

Click your user name at the top right and navigate to **Admin settings user management**.

You assign roles to users by managing users' accounts. When you create a user, you must select a role for each of the role types.