# Managing users for IAM-based domains
<a name="manage-users-iam-based-domains"></a>

As a domain administrator, you can use the domain user management page for IAM-based domains to view all users that are active in the domain. From this page, you can manage access, update permissions, and modify project membership from a single screen.

To access user management, choose **Users** in the left navigation pane of the domain administration page.

## Viewing and filtering users
<a name="view-users-iam-based"></a>

The **Users** page displays all users in the domain. You can use the following options to find specific users:
+ **Search** — Search across all users by name.
+ **Filter by type** — Filter the list by user type: IAM, SSO user, or SSO group.
+ **Filter by designation** — Filter by designation: Owner or Contributor.
+ **Filter by status** — Filter users by their Active or Inactive status.

## Adding a user
<a name="add-user-iam-based"></a>

You can add IAM users and roles, SSO users, or SSO groups to your domain and assign permissions and project membership.

**Note**  
If you are adding an IAM role or user, the [SageMakerStudioUserIAMConsolePolicy](https://docs.aws.amazon.com/sagemaker-unified-studio/latest/adminguide/security-iam-awsmanpol-SageMakerStudioUserIAMConsolePolicy.html) managed policy must be attached to the role or user.

To add a new user to the domain, complete the following steps.

1. On the **Users** page, choose **Add user**.

1. For **Type**, select IAM or SSO, and then search for the user or group to add.

1. Choose **Next** to assign permissions and project membership.

1. (Optional) To make the user a domain administrator, select the **Administrator** designation.

1. (Optional) To add the user to existing projects, choose **Add project**. Select the project and assign the project designation. You can add the user to a maximum of 8 projects.

1. Choose **Add** to add the user to the domain.

The user now appears on the **Users** page.

## Editing a user
<a name="edit-user-iam-based"></a>

You can modify user settings such as status, domain designation, and project membership.

1. On the **Users** page, choose the user name from the list.

1. Modify the user settings as needed:
   + **Status** — Set to *Active* to allow the user to log in to Amazon SageMaker Unified Studio, or *Inactive* to prevent access.
   + **Domain designation** — Update the user's domain-level designation.
   + **Project membership** — Add the user to existing projects or remove them from current projects.

1. Choose **Save** to apply your changes.