# Gateway access user managment

**URL:** <https://forum.inductiveautomation.com/t/gateway-access-user-managment/83604>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [December 29, 2023, 2:29pm UTC](https://forum.inductiveautomation.com/t/gateway-access-user-managment/83604 "2023-12-29T14:29:21Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![NII](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nii/32/12920_2.png) [@NII](https://forum.inductiveautomation.com/u/NII)\
**Post date:** [December 29, 2023, 2:29pm UTC](https://forum.inductiveautomation.com/t/gateway-access-user-managment/83604/1 "2023-12-29T14:29:21Z")

</div>

I need to create a user with limited access, this user can only manage user like add, delete and edit users.

How can I do this?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [December 29, 2023, 2:58pm UTC](https://forum.inductiveautomation.com/t/gateway-access-user-managment/83604/2 "2023-12-29T14:58:27Z")

</div>

You cannot.

Consider creating a suitably secured UI project with the necessary scripted user management operations.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 29, 2023, 4:46pm UTC](https://forum.inductiveautomation.com/t/gateway-access-user-managment/83604/3 "2023-12-29T16:46:13Z")

</div>

> [@NII](#):
>
> ... this user can only manage user like add, delete and edit users.

In your scheme couldn't the user upgrade him/herself to administrator and gain access to everything? I think you need to rethink what you are asking.

Q1. What's the real problem you are trying to solve?  
Q2. Which type of Identity Provider are you using?

---

<div class="post-metadata">

**Author:** ![Alex\_Guyer](https://avatars.discourse-cdn.com/v4/letter/a/a4c791/32.png) [@Alex\_Guyer](https://forum.inductiveautomation.com/u/Alex_Guyer)\
**Post date:** [January 2, 2024, 6:57pm UTC](https://forum.inductiveautomation.com/t/gateway-access-user-managment/83604/4 "2024-01-02T18:57:39Z")

</div>

This was something I looked into so that leadership could add and remove associates from a roster that would get alerts from ovens overnight. I found this and have been happy with it,

> **[Ignition Exchange](https://inductiveautomation.com/exchange/2243/overview)**
>
> Discover, share, and download community made Ignition resources in collaboration with your organization or the Ignition community.

Just as advised- You must restrict access to a limited number of people, and ensure those who can get there won't be messing around since it is directly effecting the Gateway level rosters. I built off of the that exchange resource and used my active directory to let associates view any rosters and who is on them, but only high level leadership could add/remove/edit.

---

<div class="post-metadata">

**Author:** ![NII](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nii/32/12920_2.png) [@NII](https://forum.inductiveautomation.com/u/NII)\
**Post date:** [January 3, 2024, 5:55pm UTC](https://forum.inductiveautomation.com/t/gateway-access-user-managment/83604/5 "2024-01-03T17:55:53Z")

</div>

Thanks Alex, will give it a try.