# Super admin tasks
> Manage local users, reset passwords, and grant CMP access as a Super Admin
---
Site [llms.txt](/llms.txt)
---
Users with the [Super Admin](/docs/onefuse/getting-started/roles-and-permissions/#global-role) role will be able to access the **Super Admin** menu option on the Top App Bar.
- [Manage local users](/docs/onefuse/getting-started/roles-and-permissions/super-admin-tasks/#manage-local-users)
- [License OneFuse](/docs/onefuse/getting-started/manage-license/)
- [Reset a user's password](/docs/onefuse/getting-started/roles-and-permissions/super-admin-tasks/#reset-a-users-password)
- [Grant users access to CMP](/docs/onefuse/getting-started/roles-and-permissions/super-admin-tasks/#grant-users-access-to-cmp)
## OneFuse UI for Super Admin
Quickly identify whether or not you are in the Super Admin UI by the color of the left navigation menu.
### Access Super Admin UI from the Workspace
When the [Super Admin](/docs/onefuse/getting-started/roles-and-permissions/#global-role) user has a [Workspace Role](/docs/onefuse/getting-started/roles-and-permissions/#workspace-roles), the user can go to the Super Admin UI from the Workspace.
- Select the wrench button on the Top App Bar.
### Access the Workspace from the Super Admin UI
If the [Super Admin](/docs/onefuse/getting-started/roles-and-permissions/#global-role) user has a [Workspace Role](/docs/onefuse/getting-started/roles-and-permissions/#workspace-roles), the user can go back to the Workspace from the Super Admin UI.
- Select the **Return to Workspace** button on the Top App Bar.
### Access the CMP UI from the Super Admin UI
If the [Super Admin](/docs/onefuse/getting-started/roles-and-permissions/#global-role) user has added a [CMP License](/docs/onefuse/getting-started/manage-license/#add-a-new-cmp-license), the user can access the CMP UI from the Super Admin UI.
- Select the button with the CloudBolt logo on the Top App Bar.
### Access the Cloud Cost & Security Optimization UI from the Super Admin UI
- Select the button with the Cloud Cost & Security Optimization icon on the Top App Bar.
## Manage local users
### Access the User Management dashboard
1. Log in to the [OneFuse UI](/docs/onefuse/getting-started/ui-overview/).
2. If you are in the Workspace, select the wrench button on the Top App Bar.
3. Select **User Management** from the left navigation menu.
### Create a local user
Create a new user to access OneFuse.
1. [Access the User Management dashboard](#access-the-user-management-dashboard).
2. Select **+ Create**.
3. Fill out the user form:
- Determine whether the user will be a **Super Admin**. See [Roles, permissions, and access](/docs/onefuse/getting-started/roles-and-permissions/) for more details.
- Enter a temporary password for the user's initial login.
4. Select **Create**.
5. Inform the user of their username and temporary password so they can log in.
6. Instruct the user to perform [Change my password](/docs/onefuse/getting-started/roles-and-permissions/user-tasks/#change-your-password) after initial login.
7. A Workspace Admin can then [add the user](/docs/onefuse/getting-started/roles-and-permissions/workspace-admin-tasks/#manage-workspace-users) to a [Workspace](/docs/onefuse/concepts/workspace/).
### Delete a local user
Delete a user from OneFuse when they no longer need access.
1. [Access the User Management dashboard](#access-the-user-management-dashboard).
2. Find the user of interest.
3. Select the delete (trash can) button.
4. Confirm by selecting **Delete**.
5. The user is deleted from OneFuse and from the Workspace.
### Update a local user
- [Reset a user's password](#reset-a-users-password).
- A user can perform [Update profile settings](/docs/onefuse/getting-started/roles-and-permissions/user-tasks/#update-profile-settings) and [Change my password](/docs/onefuse/getting-started/roles-and-permissions/user-tasks/#change-your-password).
To update a user's **Global Role**:
1. [Access the User Management dashboard](#access-the-user-management-dashboard).
2. Find the user of interest.
3. Select the edit (pencil) button.
4. Update the information on the user form. Determine if the user will be a **Super Admin** or not. To learn more, refer to [Roles, permissions, and access](/docs/onefuse/getting-started/roles-and-permissions/).
5. Select **Update**.
## Reset a user's password
Use this procedure when a user has forgotten their password. In a future release, the user will be able to reset their own password.
1. Log in to the [OneFuse UI](/docs/onefuse/getting-started/ui-overview/).
2. Select the wrench button on the Top App Bar to access the Super Admin UI.
3. Select **User Management** from the left navigation menu.
4. Find the user of interest and select the edit (pencil) button.
5. Under **Security**, select **Update Password**.
6. Enter a temporary password.
7. Select **Update**.
8. Inform the user of the temporary password and instruct them to perform [Change my password](/docs/onefuse/getting-started/roles-and-permissions/user-tasks/#change-your-password) after logging in with it.
## Grant users access to CMP
Enable existing OneFuse users to access CloudBolt's [Cloud Management Platform](/docs/cmp/about/).
### Prerequisites
1. [Add a CMP license](/docs/onefuse/getting-started/manage-license/#add-a-new-cmp-license).
2. Configure and set up CMP: [add a Resource Handler](/docs/cmp/configure/infrastructure/resource-handlers/) and create a Blueprint, [add Groups](/docs/cmp/configure/access-and-security/groups-roles-permissions/), configure Admin Settings, and more.
3. Identify the users who need CMP access.
### Add users to CMP groups, roles, and permissions
1. Log in to the OneFuse UI with the **Super Admin** (formerly Configuration Admin) role.
2. Select the CloudBolt logo on the Top App Bar to access the CMP UI.
3. Log in to CMP with the Super Admin user.
4. Add the user to any additional CMP Group(s) and assign CMP Role(s) and Permissions.
OneFuse users automatically exist as users in CMP. If a user was added to the OneFuse Workspace with a Workspace Role, they will automatically be added to the CMP Group for OneFuse named **Default**.
Learn more about:
- [CMP Groups, Roles, and Permissions](/docs/cmp/configure/access-and-security/groups-roles-permissions/)
- [CMP Permissions](/docs/cmp/configure/access-and-security/groups-roles-permissions/permissions/)
- [CMP Global Roles](/docs/cmp/configure/access-and-security/groups-roles-permissions/global-roles/)
### Access the CMP UI from OneFuse
After the user is added to the appropriate CMP Group(s), they can access the CMP UI in either of these ways:
- Navigate directly in the browser by removing `/ui` from the OneFuse instance URL. For example, if OneFuse is at `https://onefuse.example.com/ui`, access CMP at `https://onefuse.example.com`.
- Select the CloudBolt logo on the Top App Bar when logged in to OneFuse.