---
title: Manage accounts
url: https://docs.triply.cc/how-to/manage-accounts/
description: 'Administrator tasks: restrict who can sign up to a TriplyDB instance, limit how openly content
  can be shared, create and delete user accounts, and create custom roles for group members.'
---

# Manage accounts

Administrator tasks: who can create an account on a TriplyDB instance, how openly content on it
can be shared, creating and deleting accounts on someone's behalf, and defining the roles group
members can be given. Everyday users need [access levels](https://docs.triply.cc/concepts/access-levels/) or
[API tokens](https://docs.triply.cc/how-to/create-an-api-token/) instead. For what the admin pages show, see
[Admin settings](https://docs.triply.cc/reference/admin-settings/).

## Restrict who can sign up

1. Open the [admin settings](https://docs.triply.cc/reference/admin-settings/#getting-there), then **Security**
   under **General**.
2. In the **Sign-up** section, choose whether people may register with a password. With
   **Password signup enabled** switched off, they can only register with a Google or GitHub
   account.
3. With password sign-up enabled, fill in **Permitted signup domains** to limit it to email
   addresses on those domains. Wildcards are allowed and domains are comma separated:

    ```
    mydomain.com,*.mydomain.com
    ```

4. Click **Save**.

## Limit how openly content can be shared

1. Open the [admin settings](https://docs.triply.cc/reference/admin-settings/#getting-there), then **Security**
   under **General**.
2. In **Access levels**, choose the **Maximum access level**. **Internal** keeps everything on the
   instance behind a login.
3. Click **Save**. If existing content is more open than the new maximum, the console lists what
   will be lowered; type the level to confirm. Raising the maximum again later does not undo
   this.
4. Optionally, choose the **Default access level** that new content starts at, and click
   **Save**.

See [Access control](https://docs.triply.cc/concepts/access-levels/#access-levels) for what each level means.

## Create a user

1. Open the [admin settings](https://docs.triply.cc/reference/admin-settings/#getting-there), then **Users** under
   **Access**.
2. Click **Add user**.
3. Fill in the user name and email address. The user name must consist of alphanumeric characters
   (`A-Za-z`) and hyphens (`-`).
4. To create a temporary account, set a date in **Account expiration date**. Accounts do not
   expire otherwise.
5. Click **Add user**.

This sends an account creation email containing a link with which the new user logs in and sets
their own password. The account is listed in the Users table straight away; see
[Users and Groups pages](https://docs.triply.cc/reference/admin-settings/#users-and-groups-pages) for what each
column means.

## Create a custom role

A custom role grants a subset of the permissions, for a group member that neither `owner` nor
`member` fits — for example read/write access to datasets without the right to manage SPARQL
services. See [Roles](https://docs.triply.cc/concepts/access-levels/#roles) for how roles combine with access levels.

1. Open the [admin settings](https://docs.triply.cc/reference/admin-settings/#getting-there), then **Roles** under
   **General**.
2. Click **Create role**.
3. Enter a name and a description. Choose a name that says what the role is for, since that is
   what whoever assigns it will see.
4. Select the permissions the role should have. The category filters and the search field narrow
   the list.
5. Click **Create**.

The role can now be assigned in the member settings of any group, by a member with the "Manage
group" permission. It can be edited or deleted later from the same page.