# Grant users access to OneFuse

> Enable Cloud Management Platform (CMP) users to access OneFuse

---

Site [llms.txt](/llms.txt)

---

## Prerequisites

- [License OneFuse](/docs/cmp/configure/administration/product-license/)

## Add users to the OneFuse group

<div class="alert alert-info" role="alert">


The **Default** workspace group and the workspace roles appear only after [OneFuse](/docs/onefuse/) is licensed and initialized.
</div>


1. Log in to CMP as an administrator who can manage users and groups.
1. Go to **Admin** > **Groups**.
1. Select the group named **Default**. Its breadcrumb shows **Groups / Workspace: Default**.
1. On the **Users** tab, select **Add** (+).
1. In the **Add Users to Group Default** form, under **Roles to grant**, assign exactly one workspace role:
   - **Workspace Admin**
   - **Workspace Member**
   - **Workspace Executor**
   - **Workspace Viewer**
1. Select the users for that role, then select **Add Users**.

<div class="alert alert-warning" role="alert">


Assign only one workspace role. If a user has any other role in this group, they may not be able to access OneFuse.
</div>


For more information, see [Groups, roles, and permissions](/docs/cmp/configure/access-and-security/groups-roles-permissions/) and [Permissions](/docs/cmp/configure/access-and-security/groups-roles-permissions/permissions/).

## Access OneFuse from CMP

After a user has a workspace role in the OneFuse group, they can access OneFuse in either of these ways:

- Append `/ui` to the CMP instance URL. For example, `https://cmp.example.com/ui`.
- When logged in, open the **Help** menu in the top navigation bar and select **OneFuse**.