## Set default user roles for SSO

URL: https://docs.atlan.com/product/integrations/identity-management/sso/how-tos/set-default-user-roles-for-sso

> Set the role Atlan assigns to new users on their first SSO sign-in. Use Member for most workspaces, Guest for read-only users, or Admin for elevated access.

When a user signs in to Atlan for the first time via SSO, Atlan auto-provisions their account and assigns a default role. Setting the right default before users start signing in avoids having to manually re-role accounts after the fact.

The default role applies only to newly provisioned SSO users. Existing users keep their current role, and any user's role can be changed individually by an admin at any time.

## Prerequisites

- You are an **admin** in Atlan.
- SSO is already configured for at least one provider. If not, see [Set up authentication](https://docs.atlan.com/llms/governance/access-control/authentication-and-authorization/llms.txt) first.

## Set default role

1. In your Atlan workspace, click **Settings** from the left menu.

 If you are using the **Old UI (Classic)**, from the left menu, click **Admin**.

2. Click **SSO**, then open the SSO provider you want to configure.

3. Under _Default Role_, select **Guest**, **Member**, or **Admin** from the dropdown.

The next user provisioned through that SSO provider lands with the role you selected. If you have multiple SSO providers configured, each has its own default role setting. Set it for each provider separately.

## Need help?

If new SSO users are landing with the wrong role, check that you updated the default on the **correct provider**. Atlan supports multiple SSO providers and each has its own setting. Contact [**Atlan Support**](https://docs.atlan.com/support/submit-request) if the issue persists.

## Next steps

- [Restrict auto user creation](https://docs.atlan.com/llms/governance/access-control/limit-sso-automatically-creating-users-when-they-log-in/llms.txt): Limit sign-in to only the users your identity provider assigns.
- [Invite new users](https://docs.atlan.com/llms/governance/access-control/invite-new-users/llms.txt): Bring people into the workspace.

---