💡 Still using the classic Drata experience? Refer to Role Administration & RBAC for the original UI.
A user can have multiple roles. When you change a person’s role, you are adding or removing roles from their existing assignments.
Ownership of assigned items (such as controls, risks, or tasks) updates automatically based on the user’s remaining roles.
To change or remove a user's role
Note: Only admins can change or remove roles. Admins cannot remove themselves from an admin role.
Go to Settings → Organization → Role administration.
Find and select the user.
Review the Assigned roles section, which lists all roles currently assigned to the user.
Expand the role you want to change.
Select Remove role to remove it from the user.
To remove and re-assign a new role:
Select Remove and re-assign role, then choose the desired role and confirm.