> ## Documentation Index > Fetch the complete documentation index at: https://docs.flowforma.com/llms.txt > Use this file to discover all available pages before exploring further. # User Permissions (Privileges) > Assign FlowForma Analytics privileges by user type to control access to layouts, accounts, passwords, themes, and user access management. The top-level Administrator account will have all privileges activated by default. As shown in the following screenshot, this allows them to control most aspects of Analytics Dashboard and its users. Administrator privileges activated by default Each function in the analytics dashboard is assigned a privilege, and these are defined in blocks by User Type. For example, you could create an Administrator whose only actual Administrator function is to Edit Users. Privileges defined in blocks by User Type If a user doesn't have the **Can Modify Layouts** privilege and they view a Category that doesn't have a default layout they will see the following error message. Error message shown without Can Modify Layouts privilege The **Can Change Own Password** and **Can Change Own Theme** permissions are now linked to the **Can Access Account** permission. Users need to be able to access the Account screen, accessed by selecting the user name under the **More Options** at the top-right of the dashboard, to change their password and theme. Account screen access If you tick either the **Can Change Own Password** or **Can Change Own Theme** permissions in Dashboard Configuration > Users, the **Can Access Account** permission will be selected by default. Can Access Account selected by default Similarly, if you untick the **Can Access Account** permission, **Can Change Own Password** and **Can Change Own Theme** will also be unticked. The **Can Access Account** permission can be ticked without selecting **Can Change Own Password** and **Can Change Own Theme**. In this case, the user will only be able to amend their name and password. A new privilege - **Can Manage User Access** has been added to the system. Can Manage User Access privilege Previously, in order to manage User Access, an administrator had to have Edit Categories, Edit Users, and Edit Roles privileges. With the addition of the **Can Manage User Access** privilege users can manage User Access, without being able to create dashboard users. **Migrations** * All users with the combination of the 3 privileges mentioned above will be migrated to the new **Can Manage User Access** privilege * The same migration will also apply to Roles that currently have the 3 privileges mentioned above However, if you have a User who has multiple Roles and one Role gives the user the Edit Categories privilege while another Role gives them the Edit Users and Edit Roles privileges, the User and Roles will not be migrated to the **Can Manage User Access** privilege automatically.