# Account management

## Overview <a href="#accountmanagement-overview" id="accountmanagement-overview"></a>

After the deployment of the Nexthink instance, the only user that exists in the system is the main administrator, referred to as _admin_ in the system. The main administrator has unrestricted access to all data available in the Nexthink web interface. Moreover, the main administrator is able to create and modify all types of content in the system, including dashboards, investigations, categories, alerts, and user accounts.

The main administrator can create accounts for other users, restrict their views of the data and limit their ability to alter the content. The following sections describe how to add users to the system and control their data access.

* [Accounts](account-management/accounts)
* [Roles](account-management/roles)
* [Single sign-on](account-management/single-sign-on)
* [Profiles (classic)](account-management/profiles-classic)
* [Roles (classic)](account-management/roles-classic)
* [Users (classic)](account-management/users-classic)
* [API credentials](account-management/api-credentials)

## Prerequisites <a href="#accountmanagement-prerequisites" id="accountmanagement-prerequisites"></a>

Before defining new profiles and users, ensure that you have the right licenses for the products you need. Otherwise, some configuration pages will not be displayed. Contact [Nexthink Support](https://support.nexthink.com/) for more information.

## Account update considerations <a href="#accountmanagement-accountupdateconsiderations" id="accountmanagement-accountupdateconsiderations"></a>

* Changes to accounts and their permissions may not take immediate effect for logged-in users.
* If you are logged in to Finder or the Nexthink web interface, old permissions are kept for the lifetime of the session.
* When using NXQL API, the old permissions are enforced for up to five minutes after the change until the system synchronizes account information with the Nexthink web interface.

***

RELATED TOPICS

[Single sign-on](account-management/single-sign-on)
