---
title: "Managing Users and Groups"
description: "On the Users and Groups tab, you can manage Veeam ONE users and groups — assign roles and define the backup infrastructure scope. To add a user or group to limit access to Veeam ONE: Open Veeam ONE Web Client."
canonical: "https://helpcenter.veeam.com/docs/one/userguide/users_and_groups.html"
breadcrumb: "User Guide > Configuring Veeam ONE > Access Management > Managing Users and Groups"
dateModified: "2026-10-23"
---

# Managing Users and Groups

On the **Users and Groups** tab, you can manage Veeam ONE users and groups — assign roles and define the backup infrastructure scope.

## Adding Users and Groups

To add a user or group to limit access to Veeam ONE:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Access Management**.
4. On the **Users and Groups** tab, click **Add** to open the **Add Access** wizard.
5. At the **User or Group** step of the wizard:

   - From the **Identity Source** list, select *Local Users* or a configured identity provider. Identity providers appear in the list under their display names.
   - From the **Type** list, select *User* or *Group*.
   - In the **Name** field, specify the name of the user or group. For an identity provider, the name must exactly match the value that the identity provider sends:

     - *User* — enter the NameID value, for example, the UPN *jdoe@example.com*.
     - *Group* — enter the value of the group claim. With Microsoft Entra ID, this is the group object ID by default, or the group display name if the group claim is configured to emit cloud-only group display names.

     If no user or group matches, sign-in fails with the following error: *No matching rules found for the current identity provider user.*

     [![](images/add_access_user.png)](images/add_access_user.png){.toggle}

6. At the Veeam ONE **Role** step of the wizard, select the Veeam ONE user role:

   - Veeam ONE Administrator
   - Veeam ONE Power User
   - Veeam ONE Read-Only
   - Veeam ONE Backup Administrator  


     For details on user roles, see [Security Groups](security_groups.md).

     [![](images/add_access_role.png)](images/add_access_role.png){.toggle}

7. [Optional] At the **Infrastructure Objects** step of the wizard, select the backup infrastructure objects available to the user or group. This step applies only if you selected the *Veeam ONE* *Backup Administrator* role.

   [![](images/add_access_scope.png)](images/add_access_scope.png){.toggle}

8. Review the configuration summary and click **Finish**.

   [![](images/add_access_summary.png)](images/add_access_summary.png){.toggle}

## Editing Users and Groups

To edit a user or group:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Access Management**.
4. On the **Users and Groups** tab, select the user or group you want to edit, and click **Edit**.

The wizard opens with the settings you specified when adding the user or group. Edit them as required and click **Finish**.

## Removing Users and Groups

If a user or group no longer needs access to Veeam ONE, you can remove its access entry. This revokes the assigned role but does not delete the user or group.

To remove a user or group:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Access Management**.
4. On the **Users & Groups** tab, select the user or group you want to remove, and click **Remove**.
5. In the **Remove Access** window, click **Confirm**.

## Enabling or Disabling Users and Groups

You can disable a user or group to temporarily revoke its access to Veeam ONE without removing the access entry. Disabling keeps the assigned role and settings, so you can enable the user or group again to restore access.

To enable or disable a user or group:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Access Management**.
4. On the **Users and Groups** tab, select the user or group you want to enable or disable.

   To find the necessary user or group, use the search box to search by name or the **Type** filter to narrow the list by user type.

5. At the top of the user list, click **Enable** or **Disable**.
6. In the confirmation window, click **Confirm**.

[![Users and groups configuration](images/Users_and_groups.png "Users and groups configuration")](images/Users_and_groups.png){.toggle scale=50}