# Manage user permissions in the Amazon DataZone data portal
<a name="user-management-portal"></a>

You can use the Amazon DataZone management portal to configure authentication for IAM users and roles, SSO users and groups, and SAML users. Amazon DataZone assigns a user profile to each user that uses Amazon DataZone.

User profile permissions to use projects, create entities, etc. are managed using domain untis and policy grants. Within a specific project, the project membership desigation (owner, contributor, view) determines the action authorization.