# Manage members: change role, block, remove

By the end, you have found an account in the list, set its display name and role, and know how to suspend it, reactivate it, or delete it permanently.

> **Type:** guide
> **For:** Owners who maintain access
> **Prerequisite:** the permissions **Edit members**, **Assign roles**, **Suspend accounts**, and **Delete accounts**, usually the **Owner** role
> **Where in the portal:** **Team › Members**, then open an entry

## Steps

### Narrow down the list

The table shows **Member**, **Role**, **Status**, and **Last active** in each row. With **Columns**, you show and hide columns, and **Load more** fetches further rows. Your own row shows the badge **You**. Three filters narrow the list: the field **Search by name or address …**, **Filter status** (**All statuses**, **Invited**, **Active**, **Suspended** …), and **Filter by role** (**All roles**). If nothing fits, it says **No matches.** The statuses that occur are **Pending**, **Active**, **Suspended**, and **Deleted**.

![The members table with the search field (1), the Status filter (2), the Role filter (3), the column selection (4), and the badge You in your own row (5)](/docs/organization/bilder/1c12c302-member-list-filter.png)

### Change the display name

Open the entry and stay on the **Profile** tab. Adjust **Display name** and click **Save profile**. **Profile saved** appears.

### Assign or change the role

You get there through the row menu **Change role …** or the **Role** tab. Both show the same view. It begins with these sentences: “An account carries exactly one role. The selection replaces the previous assignment; without a role the account keeps its access and only its direct permissions apply.”

1. Choose the role. Built-in roles show the badge **built-in**, with the number of their permissions next to it. The selection is exclusive.
2. If needed, set **Expires on**. “Without a date the role has no end.” With the date, the role ends: The account falls back to **Member** and signs in again. The last Owner stays Owner, and their expiry date is dropped.
3. If needed, enter a **Reason**: “Appears in the change log next to the change. One sentence is enough.”
4. Click **Save role**. **Role saved** appears.

The portal does not offer some roles and gives the reason next to the option: your own role (“You cannot change your own role — an account could otherwise take away its own ability to act.”), a role above your own set (“Contains 2 permissions you do not hold yourself.”), the **Owner** role for non-Owners (“Only an owner can assign this role.”), and the last Owner (“This is the last owner of the organization. Appoint another owner first.”). There is no “no role” option: “There is always exactly one role. To grant less, downgrade the account to Member.”

![The Role tab of a member with the role list, in which built-in roles show the badge built-in and their permission count (1), the field Expires on (2), the field Reason (3), and the Save role button (4)](/docs/organization/bilder/526404d5-assign-role.png)

### Suspend, reactivate, delete

The **Sessions** tab shows **Last sign-in**, **Two-factor** (**Enabled** or **Disabled**), **Created**, and the account’s **Direct permissions (grants)**. The actions themselves are in the row menu and in the **Actions** menu of the detail page:

- **Suspend …** (in the row, the action is called **Deactivate**) asks **Lock account?**. A **Reason** is required. Confirm with **Suspend**. **User suspended** appears. The account can no longer sign in, and its active sessions end immediately. Its API keys and connected applications are on hold until the suspension is lifted.
- **Reactivate** restores the account (**User reactivated**).
- **Delete …**, then **Delete permanently**. The note says what happens: “GDPR deletion — the user will be pseudonymized.” Afterwards, **Deletion initiated** appears. This cannot be undone. The account’s API keys are revoked as a result.
- **Remove** in the row asks **Remove member?** and takes the account out of your list.

The portal guards against self-inflicted damage and gives the reason on the entry: “This is your own account. Locking, role changes and removal can only be done for you by someone else.”, “Owner accounts can only be managed by an owner.”, and “This is the last owner of the organization. Appoint another owner first.”

## Check the result

- The changed role appears immediately in the **Role** column. An expiry date appears as **until …**.
- Your reason appears with the change in the **Change log**.
- A suspended account has the status **Suspended** and is signed out at its next click.
- A deleted account shows **Deleted**. Its details are pseudonymized.

## If something goes wrong

| Symptom | Meaning | Solution |
|---|---|---|
| “The role could not be set” | A permission is missing, or the role was deleted in the meantime | Reload the page and choose again. |
| **Save role** stays disabled | The selection still matches the current role | Choose a different role. |
| **Suspend** stays disabled | The reason is missing | Enter a reason. The field is required. |
| “Action failed” | A permission is missing, or the action does not fit the status | Check the status and choose the matching action. |
| The display name cannot be changed | You lack the permission **Edit members** | Ask a person with the **Owner** role. |

## Related

- [Permissions by role and by area](/docs/organization/permissions-by-role)
- [Create custom roles and grant direct permissions](/docs/organization/custom-roles)
- [Read and export the change log](/docs/organization/read-change-log)