- Getting started
- Best practices
- Tenant
- About the Tenant Context
- Searching for Resources in a Tenant
- Managing Robots
- Connecting Robots to Orchestrator
- Storing Robot Credentials in CyberArk
- Storing Unattended Robot Passwords in Azure Key Vault (read only)
- Storing Unattended Robot Credentials in HashiCorp Vault (read only)
- Storing Unattended Robot Credentials in AWS Secrets Manager (read only)
- Deleting Disconnected and Unresponsive Unattended Sessions
- Robot Authentication
- Robot Authentication With Client Credentials
- SmartCard Authentication
- Configuring automation capabilities
- Audit
- Settings - Tenant Level
- Resource Catalog Service
- Folders Context
- Automations
- Processes
- Jobs
- Triggers
- Logs
- Monitoring
- Queues
- Assets
- Storage Buckets
- Test Suite - Orchestrator
- Other Configurations
- Integrations
- Host administration
- Organization administration
- About organizations
- Managing organization administrators
- Managing organization settings
- Managing access
- Managing accounts and groups
- Audit logs
- Troubleshooting
![](https://docs.uipath.com/_next/static/media/grid.05ebd128.png?w=3840&q=100)
Orchestrator user guide
Managing accounts and groups
Organization administrators can view, add, edit, or remove accounts and groups at the organization level.
You can add new groups if you want to define a custom mix of roles and license allocation rules to use for a particular group of accounts. For example, the ones needed by your colleagues in the Accounting department to use Automation Suite.
- In the Accounts & Groups page, navigate to the Groups tab.
- Select Add Group. The Add Group window is displayed.
- Fill in the Name field.
- On the Group Members field, add users to the group. Only users that have been invited to your organization beforehand are displayed here.
Unlike default user groups, custom groups need to be added manually to your services to allocate roles.
The panel closes and the new account is available in the list of user accounts.
The robot account is added and is now visible on the Robot accounts page. It is also added to the groups you selected.
Continue the setup of the robot account in UiPath® Orchestrator as you would set up a user account for unattended use: Unattended Setup .
Adding an account - either user or robot - to a group means the account inherits the roles and licenses assigned to the group.
- Go to Admin > organization > Accounts & Groups and select the Groups tab.
- Select Edit.
- In the Group Members field, type to search for a user or robot account.
- Select the account from the list of results to add it to the group.
- Select Save.
You edit accounts and groups in the same way:
- Go to Admin > organization > Accounts & Groups and select the appropriate tab.
- Select Edit.
- Make changes as needed.
- Select Save.
You can check the roles assigned to an account or group from UiPath Orchestrator.
Go to Tenant > Manage Access > Assign roles and select Check roles & permissions. You can search for any account or group to view the assigned roles.
In the Check roles window, each permission is listed on a per-folder basis. Adjacent to each permission, you can view whether it has been explicitly assigned or inherited from the tenant.
- Go to Admin > organization > Accounts & Groups, and select the appropriate tab.
- Select Remove.
- In the dialog, confirm the action to proceed with the removal.
For accounts: After the account is removed, the user or service can no longer log in to UiPath standalone product installations.
For groups, after the group is removed:
- Any roles, licenses, or robot setup for the removed group are revoked from all user accounts that belonged to the group.
- If a user account that was a part of the removed group does not have any other roles (either directly assigned or inherited from other groups), they can still log in, but they have read-only rights.