> For the complete documentation index, see [llms.txt](https://docs.wellcomecollection.org/archivematica/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.wellcomecollection.org/archivematica/administering-archivematica/user-management/add-or-remove-users.md).

# How to add or remove users

We use Azure Active Directory (OpenID Connect) for authentication. When somebody tries to log in to Archivematica, they are sent to an Active Directory login page first. Once you're logged in with AD, you have access to Archivematica if and only if you have been authorised by an Archivematica admin.

If you want to give somebody access to Archivematica:

1. Log in to the dashboard as an admin
2. Select **Administration** from the top menu bar.
3. In the sidebar, click **Users**.
4. Click **Add New**.

   ![Screenshot of the Archivematica user management screen, with green arrows highlighting key areas](https://681624210-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FDAM268qVZ2nrq3bsj6TI%2Fuploads%2Fgit-blob-36dd27b03b9147205fcffeae4f5029df610d964a%2Fuser_management.png?alt=media)
5. Fill in the new user form. The two interesting fields:

   * Email address must match their Wellcome email address, e.g. `a.chan@wellcome.ac.uk`
   * The password can be anything, and they won't be using it in practice -- pick a suitably long random string and use that. If you want to generate passwords and you're comfortable on the command line, try running:

     ```
     python3 -c 'import secrets; print(secrets.token_hex())'
     ```

   Click **Create** when you're done.

To remove somebody's access, delete the user with their email address.