---
title: Managing local accounts and role assignments
description: You can create, modify, update, or deactivate accounts in the Administrative Accounts window.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:pf_managing_local_accounts_role_assignments
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/pf_managing_local_accounts_role_assignments.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 10, 2024
section_ids:
  steps: Steps
---

# Managing local accounts and role assignments

You can create, modify, update, or deactivate accounts in the **Administrative Accounts** window.

## Steps

1. Go to **System > Server > Administrative Accounts**, and then perform any of the following actions.

   | Task                            | Steps                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
   | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
   | Create a local account          | 1. On the **Administrative Accounts** window, click **Create User**.

   2. On the **User Information** tab, enter a username and other optional information.

If you want PingFederate to notify the user about password changes via email, you must supply an email address.1. On the **Password Generation** tab, enter a password or click **Generate one-time password** to generate a random password for the account.

      

Upon successful authentication, the user will be required to change the password of the account immediately.

   2. On the **Summary** tab, review your configuration, modify as needed, and then click **Done**.

   3. On the **Administrative Accounts** window, select the applicable account type, **Auditor** or **Admin**, and one or more administrative roles for an **Admin** account.

   4. Repeat these steps to create additional accounts. |
   | Modify user information         | 1) On the **Administrative Accounts** window, select the account by its username.

Applicable only to active accounts.1) On the **User Information** window, update the record, and then click **Done**.

   2) Repeat these steps to update other accounts.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
   | Update role assignments         | 1. Select a different account type, **Auditor** or **Admin**, for one or more accounts.

   2. Select or clear the checkboxes that correspond to the three administrative roles, **User Admin**, **Admin**, and **Crypto Admin** for one or more accounts.

Applicable only to the Admin accounts.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
   | Deactivate or reactive a native | 1) Click **Deactivate** or **Activate** under **Action**.

   2) Repeat this step to deactivate or reactive other accounts.

For traceability and accountability purposes, local accounts cannot be deleted Their records are retained and they can be reactivated if needed.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |

2. To keep your configuration, click **Save**.