Users changedgovernment/org-admin/users
Nearest release: v2.1.319, published 15 hours before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 6 Nov 2026 16:05 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 6 Nov 2026 16:07 UTC.
Upstream edited
Recorded here
Lines+56added
Lines−85removed
From line
1
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits11to this page, all time
## Change a role ## Reset usage limits ## Sign out everywhere ## Finding users ## What's shown for each user ## Changing a user's role ## Resetting a user's limits ## Things to know
The whole hunk
from line 1, old and new numbered
/
from line 1
11# Users
22
3> Use this page to find a user, change their role or seat tier, check how close they are to their usage limits, and reset those limits when needed.
3> Find a user, change their role or seat tier, sign them out everywhere, check and reset their usage limits, and see what each organization role can do.
44
55> **Who this is for:** Organization owners who need to manage individual users' roles, seat tiers, and usage limits.
66
7Use this page to find a user, change their role or seat tier, check how close they are to their usage limits, and reset those limits when needed.
7The **Users** page lists everyone in your organization and lets you manage their access. Use **Filters** to narrow the list by role or seat tier, or to include deactivated accounts.
88
9The **Users** page lists everyone in your organization and lets you manage their access.
9> [!NOTE]
10>
11> These cases are covered on other pages:
12>
13> * **Adding people to your organization**: see [How people get access](https://claude.com/docs/government/overview.md#how-people-get-access)
14> * **Users your directory provisions**: provisioning can overwrite a role or seat tier you set here, **Unassigned** included, as described under [What your directory controls](https://claude.com/docs/government/org-admin/provisioning.md#what-your-directory-controls)
1015
11## Finding users
12
13Type into the search box to filter the list by name or email address. Use **Filters** to include deactivated accounts.
14
15## Copy user email addresses
16
17To email everyone in your organization:
18
191. Select the **Copy user email addresses** button at the top of the **Users** page. The page that opens lists every user's email address except deactivated users.
202. Under **Separator**, choose **Comma** or **Semicolon (Outlook)**.
213. Select **Copy** to copy the list as shown. A list of more than 450 addresses appears in parts of up to 450, each with its own **Copy** button.
22
23Paste the list into the Bcc field so that recipients do not see each other's addresses.
24
25## What's shown for each user
26
27Each user appears as a card with their name, email address, and the following fields:
28
29| Field | Description |
30| - | - |
31| **Role** | The user's role in this organization. You can change it directly from the dropdown. |
32| **Seat tier** | Which seat tier the user currently occupies. You can change it directly from the dropdown. |
33| **Usage** | Two bars showing how much of the user's 5-hour and 7-day spend limits are currently used, with the exact percentage alongside each. Hover over the bars to see when each limit resets. Users who have no seat tier show a dash instead of the bars. |
34| **Last login** | The date and time the user last signed in. |
35
36The **…** menu on each card has the **Reset usage limits** action, which clears the user's current rate-limit windows. The menu appears only when your organization has at least one [self-managed seat tier](https://claude.com/docs/government/org-admin/seat-tiers.md).
37
3816## Understanding roles
3917
40A **role** controls what a person can do in the admin portal. It has no effect on which Claude models they can use or how much they can use them; those are controlled by the seat tier.
18A **role** controls what a person can do in the admin portal. It has no effect on which Claude models they can use or how much they can use them; those are controlled by the [seat tier](https://claude.com/docs/government/org-admin/seat-tiers.md).
4119
4220* A **User** can use the Claude products but has no admin access.
43* An **Owner** can access this organization admin portal and perform every action described in this guide except for granting or removing the Primary Owner role.
44* A **Primary Owner** has the same access as an Owner and is additionally protected so that an organization can never be left without one. A Primary Owner can also promote another user to Primary Owner or demote an existing one.
21* An **Owner** can access this organization admin portal and manage its users, seats, and settings.
22* A **Primary Owner** can do everything an Owner can, and can grant or remove the Primary Owner role.
4523
46An organization must always have at least one active Primary Owner and may have up to three. Keep at least two so that when one leaves your agency or loses account access, a remaining Primary Owner can promote a replacement and demote the person who left.
24There are no additional roles such as Billing or Developer. Tenant administrator access is a separate tenant-level membership managed on the [Admins](https://claude.com/docs/government/tenant-admin/admins.md) page, not an organization role.
4725
48If your organization no longer has a Primary Owner who can sign in, ask a tenant administrator to promote a replacement, unless your organization manages its own [billing account](https://claude.com/docs/government/org-admin/billing.md). If it does, contact Anthropic instead to have a new Primary Owner appointed. Until then, your Owners and tenant administrators can keep managing users and settings.
26An organization may have up to three active Primary Owners. If your organization no longer has a Primary Owner who can sign in, ask a tenant administrator to promote a replacement, unless your organization [manages its own billing account](https://claude.com/docs/government/org-admin/billing.md#seats). If it does, contact Anthropic instead to have a new Primary Owner appointed. Until then, your Owners and tenant administrators can keep managing users and settings.
4927
50## Changing a user's role
28## Change a role
5129
52Use the **Role** dropdown on a user's row to move them between User, Owner, and Primary Owner. The change applies immediately, and a user who is promoted to Owner can open the admin portal as soon as they refresh.
30Use the **Role** dropdown on a user's card to change their role. The change applies immediately, and a user who is promoted to Owner can open the admin portal as soon as they refresh.
5331
5432The following safeguards apply and the dropdown will refuse the change if any of them would be violated.
5533
56* You cannot change your own role. To be promoted or demoted, ask another Owner or Primary Owner to make the change for you.
57* An Owner can freely move people between User and Owner, but can't grant or remove the Primary Owner role. A Primary Owner can grant or remove it. A tenant administrator can too, unless your organization manages its own billing account.
34* You cannot change your own role.
35* An Owner can freely move people between User and Owner, but can't grant or remove the Primary Owner role. A Primary Owner can grant or remove it. A tenant administrator can too, unless your organization [manages its own billing account](https://claude.com/docs/government/org-admin/billing.md#seats).
5836* You cannot demote the organization's only active Primary Owner. Promote a second person to Primary Owner first, then demote the original.
5937* You cannot promote a deactivated user to Primary Owner. Reactivate them first.
60* You cannot add a fourth Primary Owner. Demote one of the existing Primary Owners first if you need to make room.
6138
62> [!WARNING]
63>
64> If your organization uses directory provisioning with a group-to-role mapping, be aware that the next sync can re-apply the mapped role and may overwrite a manual change you make here. To make a permanent role change for a provisioned user, update their group membership in your identity provider instead.
65
6639## Assigning a seat tier
6740
68Use the **Seat tier** dropdown to move a user onto a different tier or back to **Unassigned**. An unassigned user has no model access at all, which is the appropriate state for someone who should keep their account but should not consume any Claude usage.
41Use the **Seat tier** dropdown to move a user onto a different tier or back to **Unassigned**. An unassigned user has no model access at all, but keeps their account and any admin access. If a tier has no seats remaining it appears marked **(at capacity)** and cannot be selected, unless the user is already on it. Only a Primary Owner can change a Primary Owner's seat tier here. If one of the user's directory groups is mapped to another seat tier, the mapping puts them back on it, so first change the [mapping](https://claude.com/docs/government/org-admin/provisioning.md#group-to-seat-tier) or the user's groups.
6942
70The dropdown lists Anthropic-managed tiers first, each labeled *Managed by Anthropic*, followed by your self-managed tiers with a short summary of their model count and spend caps. If a tier has no seats remaining it appears marked **(at capacity)** and cannot be selected, unless the user is already on it.
43Changing a user's tier takes effect on their very next request. If you move someone to a tier with a different set of allowed models, any model that is not among their new tier's allowed models becomes unavailable to them immediately. Moving a user between tiers does not reset their usage counters, which are measured against the new tier's limit on their next request.
7144
72Changing a user's tier takes effect on their very next request. If you move someone to a tier with a different set of allowed models, any model that is no longer in their tier's allowlist becomes unavailable to them immediately.
45## Reset usage limits
7346
74> [!WARNING]
75>
76> If your organization uses directory provisioning with a group-to-tier mapping, the next sync can re-apply the mapped tier. For provisioned users, adjust their directory group membership rather than changing the tier here.
47Every [seat tier](https://claude.com/docs/government/org-admin/seat-tiers.md) sets a **5-hour** and a **7-day** spend limit for each user. When a user reaches either limit, further requests are refused until that limit resets. The **Usage** bars on a user's card show how much of the user's 5-hour and 7-day spend limits are currently used. Hover over the bars to see when each limit resets.
7748
78## Resetting a user's limits
49If a user on a self-managed tier has hit a limit and you want them to continue working immediately, use **Reset usage limits** in the **…** menu on their card. This clears both of their current windows so their next request is admitted. Their usage still shows on the [Analytics](https://claude.com/docs/government/org-admin/analytics.md) page.
7950
80Every seat tier sets a rolling **5-hour** and **7-day** spend limit for each user. When a user reaches either limit, further requests are refused until the window rolls forward.
51> [!NOTE]
52>
53> You cannot reset limits for users on [Anthropic-managed tiers](https://claude.com/docs/government/org-admin/seat-tiers.md#anthropic-managed-versus-self-managed-tiers).
8154
82If a user on a self-managed tier has hit a limit and you want them to continue working immediately, use **Reset usage limits** in the **…** menu on their card. This clears both of their current windows so their next request is admitted. The reset does not refund or alter any credits that have already been consumed, and it does not change anything shown on the [Analytics](https://claude.com/docs/government/org-admin/analytics.md) page; it only clears the per-user counter that enforces the limit.
55## Sign out everywhere
8356
84> [!WARNING]
85>
86> The reset button is disabled for users on Anthropic-managed tiers because those limits are set by Anthropic and are not yours to waive. Additionally, if a user moved off an Anthropic-managed tier within the last seven days, the reset button is temporarily unavailable for them and the tooltip tells you when it becomes available again.
57The **…** menu on each card has **Sign out everywhere**, which ends every session the user has open, in the browser and in Claude apps on all their devices. They can sign in again unless their account is deactivated.
8758
8859## Deactivated users
8960
90Accounts are deactivated through your directory's SCIM provisioning rather than from this page. A deactivated user cannot sign in and does not occupy a seat. Deactivating a user releases their [seat](https://claude.com/docs/government/org-admin/seats.md). Reactivating them brings the account back if a seat is free for them, as described under [What your directory controls](https://claude.com/docs/government/org-admin/provisioning.md#what-your-directory-controls).
61Accounts are deactivated through your directory's SCIM provisioning rather than from this page. A deactivated user cannot sign in. Deactivating a user releases their [seat](https://claude.com/docs/government/org-admin/seats.md). Reactivating them brings the account back if a seat is free for them, as described under [What your directory controls](https://claude.com/docs/government/org-admin/provisioning.md#what-your-directory-controls).
9162
92Deactivated users keep their role, but a deactivated Primary Owner does not count toward the "at least one" rule or the limit of three. You must always have at least one *active* Primary Owner.
63Deactivated users keep their role. Deactivating a user leaves their Claude Desktop conversations and projects on the devices they used. To remove them, see [Removing data](https://claude.com/docs/third-party/claude-desktop/data-storage.md#removing-data) in the Claude Desktop documentation.
9364
94## Things to know
65## Copy user email addresses
9566
96* Claude for Government has exactly three organization roles: **User**, **Owner**, and **Primary Owner**. There are no additional roles such as Billing or Developer. Tenant administrator access is a separate tenant-level membership managed on the [Admins](https://claude.com/docs/government/tenant-admin/admins.md) page, not an organization role.
67To email everyone in your organization, select the **Copy user email addresses** button at the top of the **Users** page. The page that opens lists every user's email address except deactivated users.
9768
No line in this hunk matches that.