# Give someone access

> Add people to a space, choose their role, and limit them to some regions.

Source: https://docs.bifrostorbit.com/cms/editors/people-and-access/

Everyone signs in through Orbit with a method their organisation allows; there are no separate passwords.

## Add someone to a space

1. Open **Configuration › Access**.
2. Choose **Add**, find the person among your organisation's members, or type their email to invite someone new, and pick a role. With Microsoft SSO connected, people from your Microsoft directory are listed too.
3. Optional: limit them to some regions. They can read every region but only change the ones chosen.

Someone added for the first time gets an invitation email with a link to sign in. People who have not signed in yet show as **Not signed in yet**. They still receive notifications and see them when they first sign in.

## Roles

Each role is a set of permissions. See [Roles and permissions](https://docs.bifrostorbit.com/cms/editors/roles-and-permissions/) for exactly what each can do. Administrators can create their own roles in the organisation's settings.

## Removing someone

Who belongs to your organisation is decided in Orbit, and CMS Orbit always follows it:

- **Remove a space role** under **Configuration › Access** to take away only that space.
- **Remove someone under Members** to take them out of CMS Orbit entirely, with every space role they had. They stay in your organisation if they use other satellites.
- **Remove someone in Orbit**, or untick CMS Orbit for them there, and they disappear from Members and Access straight away.

Suspended people cannot sign in and are not notified.