> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ulm.m1amdocs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management

**Basic User Identity Management**

**Care console** out-of-the-box controls allow you to manage user identities including the ability to reset passwords, create users, edit/update accounts and profiles.

The features available to manage your organizations user identities are:

* [Update a user](sgUpdatingProfile)
* [Add a new user](sgCareNewUser)
* [Assign a user role](sgCareChangeUserRole)
* [Reset a password](sgResettingPassword)

**Extended User Identity Management**

To manage seamless onboarding and user account operations, Care console provides additional controls from the [**Actions**](sgIdentity#section_n2k_13q_spb) menu such as:

* [**Suspend**](sgSuspendingUser) - is temporary and prevents the user from authenticating with Digital Identity Management. You can remove the suspension and allow the user to sign in and access resources/services.

* [**Remove suspension**](sgReactivatingUser) - cancels the user's suspension and allowing them to sign in and access resources/services again.

* [**Unlock User**](sgCareUnlockUser) - the user is locked out when they sign-in too many times with invalid credentials, such as a wrong password. The number of attempts and time (sec) before a lockout occurs are configured from the Admin Console. By default, the user must wait for set time to elapse before they're able to sign in again, unless the user is unlocked from Care console.

* [**Deactivate User**](sgDeactivatingUser) - immediately revokes the user's tokens, signs user out of all sessions, and prevents the user from authenticating with Digital Identity Management to access resources/services. This action is irreversible from the Care console. If a user is deactivated by mistake, contact Digital Identity Management support for assistance.

* [**Delete user**](sgCareDeleteUser) - you can delete a user permanently from the platform. This feature is hidden by default in the Care console. If you would like to enable it and have the delete feature visible, contact Digital Identity Management support for assistance.

* [**Generate a backup code for MFA**](sgCareBackupCodes) - you can generate a one-time backup code (BUC) for a user to help them regain access to their account. The user is configured for MFA and has previously registered at least one factor for 2FA.

* **[Find a User](../topics/sgFindUser)**

* **[Update a User's Details](../topics/sgUpdatingProfile)**

* **[Add New User](../topics/sgCareNewUser)**

* **[Assign User Roles](../topics/sgCareChangeUserRole)**

* **[Reset a Password](../topics/sgResettingPassword)**

* **[Unlock User](../topics/sgCareUnlockUser)**

* **[Suspend User](../topics/sgSuspendingUser)**

* **[Remove a Suspension](../topics/sgReactivatingUser)**

* **[Deactivate User](../topics/sgDeactivatingUser)**

* **[Delete User](../topics/sgCareDeleteUser)**

**Parent topic:**[Identity](../topics/sgIdentity)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.