{"slug":"changing-user-roles","title":"Changing user roles","tags":["tailscale"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Changing user roles\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nYou can change the [roles](https://tailscale.com/docs/reference/user-roles) users in your network have to restrict access to the admin console. (To restrict which users and devices can communicate in your tailnet, refer to [access control policies](https://tailscale.com/docs/features/access-control).)\r\n\r\nTo remove or suspend users, refer to [Removing and suspending users](https://tailscale.com/docs/features/sharing/how-to/remove-team-members).\r\n\r\n## [Change a user's role](https://tailscale.com/docs/features/sharing/how-to/change-role\\#change-a-users-role)\r\n\r\nYou need to be an [Owner, Admin, or IT admin](https://tailscale.com/docs/reference/user-roles) of a tailnet to change a user's role.\r\n\r\nYou can change a user's role from the [admin console](https://login.tailscale.com/admin):\r\n\r\n1. Open the [Users](https://login.tailscale.com/admin/users) page of the admin console.\r\n\r\n2. Find the row corresponding to the user you are interested in.\r\n\r\n3. Select the ![ellipsis icon](https://tailscale.com/files/images/icons/fa-ellipsis-h.svg) menu at the far right, then select the **Edit role** option.\r\n\r\n4. Select the role you want the user to have, then select **Save**:\r\n![Select a role for the user.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Frole-picker.b18ea713.png&w=1080&q=75)\r\n\r\nA user cannot change their own role.\r\n\r\n## [Change Owner](https://tailscale.com/docs/features/sharing/how-to/change-role\\#change-owner)\r\n\r\nYou need to be the [Owner](https://tailscale.com/docs/reference/user-roles) of a tailnet to change the Owner.\r\n\r\nYou can change a user's role from the [admin console](https://login.tailscale.com/admin):\r\n\r\n1. Open the [Users](https://login.tailscale.com/admin/users) page of the admin console.\r\n\r\n2. Find the row corresponding to the user you are interested in.\r\n\r\n3. Select the ![ellipsis icon](https://tailscale.com/files/images/icons/fa-ellipsis-h.svg) menu at the far right, then select the **Edit role** option.\r\n\r\n4. Select **Owner**, then select **Save**.\r\n![Reassign the Owner role to a user.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmake-owner.b0774f94.png&w=1080&q=75)\r\n\r\n### [Limitations when changing Owner](https://tailscale.com/docs/features/sharing/how-to/change-role\\#limitations-when-changing-owner)\r\n\r\n- If your tailnet uses a shared domain name (such as `gmail.com`), you cannot change ownership of the tailnet.\r\n- If your tailnet uses a custom domain name, you can change the owner only to a user on that same domain.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Changing user roles</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p>You can change the <a href=\"https://tailscale.com/docs/reference/user-roles\">roles</a> users in your network have to restrict access to the admin console. (To restrict which users and devices can communicate in your tailnet, refer to <a href=\"https://tailscale.com/docs/features/access-control\">access control policies</a>.)</p>\n<p>To remove or suspend users, refer to <a href=\"https://tailscale.com/docs/features/sharing/how-to/remove-team-members\">Removing and suspending users</a>.</p>\n<h2><a href=\"https://tailscale.com/docs/features/sharing/how-to/change-role#change-a-users-role\">Change a user's role</a></h2>\n<p>You need to be an <a href=\"https://tailscale.com/docs/reference/user-roles\">Owner, Admin, or IT admin</a> of a tailnet to change a user's role.</p>\n<p>You can change a user's role from the <a href=\"https://login.tailscale.com/admin\">admin console</a>:</p>\n<ol>\n<li>\n<p>Open the <a href=\"https://login.tailscale.com/admin/users\">Users</a> page of the admin console.</p>\n</li>\n<li>\n<p>Find the row corresponding to the user you are interested in.</p>\n</li>\n<li>\n<p>Select the <img src=\"https://tailscale.com/files/images/icons/fa-ellipsis-h.svg\" alt=\"ellipsis icon\"> menu at the far right, then select the <strong>Edit role</strong> option.</p>\n</li>\n<li>\n<p>Select the role you want the user to have, then select <strong>Save</strong>:\r\n<img src=\"https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Frole-picker.b18ea713.png&#x26;w=1080&#x26;q=75\" alt=\"Select a role for the user.\"></p>\n</li>\n</ol>\n<p>A user cannot change their own role.</p>\n<h2><a href=\"https://tailscale.com/docs/features/sharing/how-to/change-role#change-owner\">Change Owner</a></h2>\n<p>You need to be the <a href=\"https://tailscale.com/docs/reference/user-roles\">Owner</a> of a tailnet to change the Owner.</p>\n<p>You can change a user's role from the <a href=\"https://login.tailscale.com/admin\">admin console</a>:</p>\n<ol>\n<li>\n<p>Open the <a href=\"https://login.tailscale.com/admin/users\">Users</a> page of the admin console.</p>\n</li>\n<li>\n<p>Find the row corresponding to the user you are interested in.</p>\n</li>\n<li>\n<p>Select the <img src=\"https://tailscale.com/files/images/icons/fa-ellipsis-h.svg\" alt=\"ellipsis icon\"> menu at the far right, then select the <strong>Edit role</strong> option.</p>\n</li>\n<li>\n<p>Select <strong>Owner</strong>, then select <strong>Save</strong>.\r\n<img src=\"https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmake-owner.b0774f94.png&#x26;w=1080&#x26;q=75\" alt=\"Reassign the Owner role to a user.\"></p>\n</li>\n</ol>\n<h3><a href=\"https://tailscale.com/docs/features/sharing/how-to/change-role#limitations-when-changing-owner\">Limitations when changing Owner</a></h3>\n<ul>\n<li>If your tailnet uses a shared domain name (such as <code>gmail.com</code>), you cannot change ownership of the tailnet.</li>\n<li>If your tailnet uses a custom domain name, you can change the owner only to a user on that same domain.</li>\n</ul>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}