Overview
If you can edit a User’s name or email but cannot change their User Groups, Roles or Locations, check which part of the User editor is restricted. Profile editing and membership management use different permissions.
Use this guide to diagnose a missing or disabled Edit action, read-only membership fields, or access that remains after you remove a direct membership.
At a glance |
|
Who can do this | Super Users; Users › Modify for profiles. Membership changes need permission for the relevant Role, User Group or Location. |
Where | Users, User Groups, Roles or Locations |
Works on | Backend (web) |
Availability | All organizations |
💡 Why this matters: Identifying the restricted action helps you make the intended change without granting broad access or recreating the User.
Identify the restricted action
Symptom | Start here |
Name and email work; memberships do not | Check Direct Memberships. These fields are reserved for Super Users in the User editor. |
Edit is disabled or absent | Select one User, then check profile permissions and the account restrictions below. |
The profile opens read-only | Check Only allow administrator to make changes with a Super User. |
External ID is greyed out | Ask a Super User to make this change. Users › Modify does not unlock this field. |
Access remains after a removal | Check Inherited Memberships and other memberships that grant the same access. |
Change memberships from their source
1. Choose the right editor
For customer administrators, only Super Users can change Roles, User Groups, Locations and Operator memberships inside the User editor. Giving a manager Users › Modify does not unlock these controls.
ℹ️ Note: A manager may still make the intended change by editing the Role, User Group or Location itself, if they have permission to modify that item.
2. Edit the relevant item
Change needed | Where to make it | Permission route |
Join or leave a team | Edit the relevant User Group and its members. | User Groups › Modify, group creator, group Administrator, or Super User. |
Assign or remove a Role | Edit the relevant Role and its Users or User Groups. | Roles › Modify, Role creator, or Super User. |
Change Location membership | Edit the relevant Location and its members. | Locations › Modify, Location creator, or Super User. |
For the full steps, see managing User Groups, setting up Roles and giving Users access to a Location. These permissions apply in the organization that owns the item.
3. Check inherited access
Reopen the User and compare Direct Memberships with Inherited Memberships. Inherited fields are read-only because the access comes through User Groups or Location Groups. Change the membership that supplies the access rather than trying to remove the inherited entry in the User editor.
A person can receive the same Role or Location access through more than one route. Removing one direct membership may leave another route intact. See how access works in Mobaro before changing a shared group.
Check profile editing restrictions
1. Check your profile permission
Seeing a User in the list does not mean you can modify them. Editing can be allowed through Users › Modify, having created the User, or being an Administrator of one of their User Groups. The following account restrictions still apply.
2. Check every organization
To edit another User who belongs to several organizations, you need Users › Modify in every organization they belong to. Being a Super User in only one organization is not enough. Ask someone with the required access, or contact Mobaro Support.
⚠️ Heads-up: The Editing disabled dialog refers to multiple organizations, but that message alone is not a complete diagnosis. Also check whether the person is a Super User or has a locked profile.
3. Check protected profiles
You cannot edit another Super User’s profile, even if you are a Super User yourself. Ask Mobaro Support. This restriction applies if the person is a Super User in any of their organizations.
If Only allow administrator to make changes is enabled, the User editor is read-only for someone who is not a Super User. Ask a Super User to review the intended profile change. Removing a profile lock does not remove the other permission checks.
Verify the intended change
Save from the editor for the item you changed, then reopen it to confirm the membership.
Ask the affected User to check the specific work or page they need. A Role and Location membership serve different purposes.
If the change fails, record the editor, the field or button, the exact error and the active organization. Include whether the User belongs to another organization.
Do not delete and recreate the User to get around an editing restriction. For the effects of removing an account, see deactivating or deleting a User.
Best practices
Give managers the permissions needed for the items they maintain.
Review inherited access before removing direct memberships.
Treat changes to shared Roles and User Groups as changes that can affect several people.
Frequently asked questions
Why can our managers edit names and emails but not User Groups?
The User editor reserves Direct Memberships for Super Users. A manager with permission to modify the relevant User Group can add or remove the person from that group’s editor instead.
How do I put an existing User in a different User Group?
Edit the destination User Group and add the person as a member. If they should leave the old group, remove that membership separately. Review inherited access before removing it; see managing User Groups.
Why can’t I edit an employee who also has a training-organization account?
The same User can belong to several organizations. Editing that profile requires Users › Modify across all of them, with additional restrictions for Super Users and locked profiles. Ask someone with the required access or Mobaro Support.