> ## Documentation Index
> Fetch the complete documentation index at: https://docs.spott.io/llms.txt
> Use this file to discover all available pages before exploring further.
# Managing Access
> Manage access with role-based permissions and assign roles to users.
Roles ensure users only access the features necessary for their job.
## Create roles
1. In Spott, go to **Settings**.
2. In the **Admin** section, click **Security**.
Under **Workspace Roles** you can:
* Open existing roles
* Create new ones with the **New role** button
Click a role to open it. For each role, use the toggles to **enable the permissions**
that role should have, grouped per area (records, settings, analytics, exports, and
more).
For example, you may want to grant team leads access to workspace settings (to create
new fields) while restricting this for regular members, or control who can view,
manage, and export **Analytics Reports**.
On the Security page you can also **require multi-factor authentication** for your
workspace.
## Assign roles to users
1. In Spott, go to **Settings**.
2. In the **Admin** section, click **Users**.
Use the role dropdown next to a user to assign them a role, which automatically
grants the matching permissions. When a user holds more than one role, their
permissions **combine**: the roles add up rather than restrict each other.
**Admin** is a built-in role with full permissions. It cannot be deleted or reduced,
and there must always be at least one admin in the workspace.
## Good to know
* **Removing a user deactivates them** rather than deleting the account, so their
historical activity stays attributed to them.
* **There is no exportable or filterable audit log** of who changed what across the
workspace. To see changes on a single record, use its **Activity** tab.
* **Exports are per record type and per view** (to Excel). There is no single
full-database export.