> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.kodelabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Accounts and Users

> Learn how accounts, profiles, and roles work

Your account is your personal identity in Launchpad. A user profile is how that account appears within a specific organization, with its own role and permissions. Roles vary by organization and define what each user can view and do.

## Accounts and Users

Your **account** is your single identity across the entire platform. It stores all relevant details such as login credentials, security settings, and personal preferences, and it belongs to your parent organization.

Your **user profile** is different and represents your presence within a specific organization, carrying org-specific context like your position, department, or role. Each organization you belong to has its own independent user profile for you, with its own role and permissions assigned by that organization.

When you join a new organization, Launchpad creates a new user profile for you there. That profile is independent from the profile you hold in your parent organization.

<Note>
  Regardless of how many organizations you belong to, every user profile connects back to your account in your parent organization.
</Note>

```mermaid actions={false} theme={null}
---
config:
  layout: dagre
  theme: neutral
---
flowchart LR
 subgraph parentOrg["Parent Organization"]
        A["Account"]
        RP["User Profile"]
  end
 subgraph orgA["Org A"]
        UA["New User Profile in Org A"]
  end
 subgraph orgB["Org B"]
        UB["New User Profile in Org B"]
  end
    A -. Connected .-> RP
    RP -. Connected .-> A
    parentOrg -- invited to --> orgA & orgB
    
    linkStyle 0 stroke:#FF6D00,fill:none
    linkStyle 1 stroke:#FF6D00
    linkStyle 2 stroke:#00C853,fill:none
    linkStyle 3 stroke:#00C853,fill:none
```

## User Roles

User roles define what a user can view and do within **Launchpad**. Both channel partners and client organizations have their own set of Launchpad roles, with each role reflecting the different responsibilities each organization type carries.

<Info>
  Roles apply whether you're adding a user directly or inviting one from a trusted organization. The organization extending the invitation always assigns the role—independent from the Launchpad role the user holds in their parent organization. For more, see [Trust settings](/products/launchpad/get-started/provisioning-architecture#trust-settings).
</Info>

<Tabs>
  <Tab title="Channel partners">
    <ParamField path="Admin" type="Role">
      Full access to Launchpad. Admins can navigate all platform features, manage client organizations and their details, manage users, and configure SSO settings.
    </ParamField>

    <ParamField path="View Only" type="Role">
      Read-only access to Launchpad. Users with this role can view client details, user information, and sign-in methods, but can't make changes.
    </ParamField>

    <ParamField path="Restricted" type="Role">
      No access to Launchpad. Users with this role exist in the system and the channel partner can manage them centrally, but they can't log in to Launchpad.
    </ParamField>
  </Tab>

  <Tab title="Client organizations">
    <ParamField path="Admin" type="Role">
      Full access to the client organization's Launchpad. Admins can manage buildings, users, and settings within their organization.
    </ParamField>

    <ParamField path="Restricted" type="Role">
      No access to Launchpad. Users with this role exist in the system but can't log in to Launchpad.
    </ParamField>
  </Tab>
</Tabs>
